<< Back
CVE Number Vulnerability Product Severity Date
MS13-060 Vulnerability in Unicode Scripts Processor Could Allow Remote Code Execution (2850869) Windows XP Critical 14-08-2013

Technical Information

Brief overview of the risk:
This security update resolves a privately reported vulnerability in the Unicode Scripts Processor included in Microsoft Windows. The vulnerability could allow remote code execution if a user viewed a specially crafted document or webpage with an application that supports embedded OpenType fonts.
Detailed Information on the risk:

A remote code execution vulnerability exists in the Unicode Scripts Processor included in affected versions of Microsoft Windows. An attacker who successfully exploited this vulnerability could run arbitrary code as the current user.


Further information on this exploit is available at : MS13-060

Affected Software

Windows XP Service Pack 3
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems