VULNERABILITY INTELLIGENCE
CVE-2010-3959
CVSS score6.9 MEDIUM
EPSS probability14.10%
CISA KEVNot currently listed
Published2010-12-16
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C
Description
The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted CMAP table in an OpenType font, aka "OpenType CMAP Table Vulnerability."
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')