CVE-2011-2004

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows 7 Gold and SP1

Description A denial of service issue exists in the Microsoft Windows kernel, caused by improper processing of a specifically crafted TrueType font file. This could allow remote attackers to cause the system to stop responding and restart.

Recommendations For Microsoft Windows Server 2008 R2 and R2 SP1, update to a version that includes the fix for this issue. For Microsoft Windows 7 Gold and SP1, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting the use of TrueType font files from untrusted sources to minimize the risk of exploitation.