CVE:CVE-2006-0010
CNNVD:CNNVD-200601-091
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Windows解压嵌入开放类型(EOT)字体的方式存在漏洞，攻击者可能利用此漏洞在机器上执行任意指令。Internet Explorer在处理EOT字体时会调用T2EMBED.DLL。EOT文件中的数据是以Agfa MicroType Express格式压缩的，其LZ压缩的流包含有24位分配空间。这个空间大小 + 1C00h被分配到了MTX_LZCOMP_UnPackMemory函数中，但在将数据拷贝到块中之前却没有验证所生成分配空间的大小，这就允许畸形的EOT文件用二进制数据导致任意长度的堆溢出。
solution:Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,*:sp3,*:sp4,and avoid the version *:sp1,*:sp2,*:sp3,*:sp4; Upgrade microsoft windows_2003_server to a higher version than datacenter_64-bit:sp1,enterprise,enterprise:sp1,enterprise_64-bit,enterprise_64-bit:sp1,r2,r2:sp1,standard,standard:sp1,standard_64-bit,web,web:sp1,and avoid the version datacenter_64-bit:sp1,enterprise,enterprise:sp1,enterprise_64-bit,enterprise_64-bit:sp1,r2,r2:sp1,standard,standard:sp1,standard_64-bit,web,web:sp1; Upgrade microsoft windows_98 to a higher version than *:gold,and avoid the version *:gold; Upgrade microsoft windows_98se to a higher version than *; Upgrade microsoft windows_me to a higher version than *; Upgrade microsoft windows_nt to a higher version than 3.5.1,3.5.1:sp1,3.5.1:sp2,3.5.1:sp3,3.5.1:sp4,3.5.1:sp5,4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp6a,and avoid the version 3.5.1,3.5.1:sp1,3.5.1:sp2,3.5.1:sp3,3.5.1:sp4,3.5.1:sp5,4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp6a; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,*:sp2,and avoid the version *:gold,*:sp1,*:sp2