Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2012-4786: Windows font handling lets remote attackers run code

CVE-2012-4786 · published 13 years ago

Summary

Certain versions of Windows (XP, Vista, 7, Server 2003, Server 2008, and related updates) can be tricked by a specially crafted TrueType font file to run unwanted programs. An attacker could send such a font to a computer and gain control without the user’s knowledge. Apply the latest security updates from Microsoft or disable loading of untrusted fonts to protect your systems.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
microsoft	windows_7	gold `cpe:2.3:o:microsoft:windows_7:-:sp1::::::`
microsoft	windows_server_2003	All versions `cpe:2.3:o:microsoft:windows_server_2003::sp2::::::*`
microsoft	windows_server_2008	r2 `cpe:2.3:o:microsoft:windows_server_2008::sp2::::::*`
microsoft	windows_vista	All versions `cpe:2.3:o:microsoft:windows_vista::sp2::::::*`
microsoft	windows_xp	All versions `cpe:2.3:o:microsoft:windows_xp::sp2::::::*`

Original advisory text

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a crafted TrueType Font (TTF) file, aka "TrueType Font Parsing Vulnerability."

References

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

10.0 Critical

Exploitation

24% chance of attack within 30 days

Type

CWE-94Code Injection

Timeline

Published12 Dec 2012

Updated29 Sep 2026

First seen29 Sep 2026

Sources

CVE-2012-4786 · NVD

Track software like this

Free during beta