CVE:CVE-2011-3402
CNNVD:CNNVD-201111-144
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Microsoft Windows多个版本内核的Win32k TrueType字体解析引擎中存在未明漏洞。远程攻击者可借助Word文件中特制字体数据执行任意代码。这些版本包括：Microsoft Windows XP SP2和SP3版本，Windows Server 2003 SP2版本，Windows Vista SP2版本，Windows Server 2008 SP2，R2以及R2 SP1版本和Windows 7 Gold和SP1版本。
solution:Upgrade microsoft windows_7 to a higher version than -:sp1,and avoid the version -:sp1; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *:sp2,-:sp2,and avoid the version *:sp2,-:sp2; Upgrade microsoft windows_vista to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,and avoid the version *:sp2,*:sp3