Microsoft has completed the investigation into a private report of this vulnerability. We have issued MS13-096 to address the Microsoft Graphics Component Memory Corruption Vulnerability (CVE-2013-3906). For more information about this issue, please review MS13-096. This includes download links for an available security update.
update security_patch security_update security bug flaw vulnerability malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service DoS TSE
Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 Service Pack 2, Windows Vista Service Pack 2, Microsoft Office 2003 Service Pack 3, 2007 Microsoft Office Suite Service Pack 3, Microsoft Office 2010 Service Pack 1, Microsoft Office 2010 Service Pack 2, Microsoft Lync 2010, Microsoft Lync 2010 Attendee, Microsoft Lync 2013, Microsoft Lync Basic 2013