CVE-2012-0159

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8…

published May 9, 2012

CVSS
—
EPSS
27%
Percentile
98.0
In the wild
Unconfirmed
What it is

⚠️ A crafty TrueType font file is the villain here, allowing attackers to execute arbitrary code on older Windows systems—think of it as a delivery driver who’s slipped a nasty surprise into your package without you knowing! Imagine receiving a beautifully wrapped gift, only to find a prank inside that wreaks havoc instead of joy—this vulnerability lets a malicious font file do just that on your system! An attacker could exploit this vulnerability to run any code of their choosing on your machine, potentially gaining complete control over it—an absolutely devastating scenario for any user. From stealing sensitive data to wreaking havoc on your system, the consequences could be dire!

Put simply

Imagine receiving a beautifully wrapped gift, only to find a prank inside that wreaks havoc instead of joy—this vulnerability lets a malicious font file do just that on your system! This vulnerability arises from improper handling of crafted TrueType font (TTF) files, which can lead to arbitrary code execution when processed by affected systems.

What to do

An attacker could exploit this vulnerability to run any code of their choosing on your machine, potentially gaining complete control over it—an absolutely devastating scenario for any user. From stealing sensitive data to wreaking havoc on your system, the consequences could be dire! To protect yourself, upgrade your systems to a more recent version of Windows that addresses this vulnerability. Additionally, avoid opening untrusted documents or files containing TrueType fonts, and consider implementing security measures such as file type restrictions. Regularly check for software updates! You've got this! By taking these steps, you'll fortify your defenses and keep those tricky font files at bay. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.27024 · 98.0th percentile
Published
2012-05-09T00:00Z
EPSS history
Timeline
  • 09 MAY 00:00Z
    Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8…
    cvelistv5