Microsoft Update Tuesday: July 2013: an issue of True Type fonts
Summary: Microsoft's July 2013 Update Tuesday shipped 7 bulletins covering 34 CVE issues, with one CVE shared across three bulletins. MS13-055 addresses 17 CVEs across IE6 through IE10, while MS13-054 covers a single TrueType font handling bug (CVE-2013-3129) that can be triggered through a malicious Word document or Silverlight and can lead to remote code execution.
What you should know: The TrueType font flaw echoes the earlier font bug exploited as a 0-day by the Duqu malware, and because it can be reached through a Word document or Silverlight, it travels through ordinary files rather than a browser exploit. Six of the seven bulletins were rated critical, leaving only Windows Defender (MS13-058) as important.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2013-3129
- Related
- Adobe, Microsoft Release Critical Updates Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026