Security Update for Microsoft Windows

Description

These vulnerabilites have following impacts: Remote Code Execution. An attacker who successfully exploited Remote Code Execution vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system with full user rights.

Analysis

This security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow a remote code execution. The vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Affected Applications

Windows Server 2008
Windows 7
Windows Server 2008 R2
Windows 8.1
Windows Server 2012
Windows Server 2012 R2
Windows 10
Windows Server 2016

CVE References

CVE-2016-7210 CVE-2016-7205 CVE-2016-7217 CVE-2016-7256

Other References

https://technet.microsoft.com/en-us/library/security/ms16-132