MS13-054: Description of the security update for Windows DirectWrite: July 9, 2013

Introduction

This update resolves a vulnerability that could allow remote code execution on a client system if a user opens a specially crafted document or visits a specially crafted webpage that embeds TrueType font files.

Summary

Microsoft has released security bulletin MS13-054. To view the complete security bulletin, go to one of the following Microsoft websites:

• Home users:
  

  http://www.microsoft.com/security/pc-security/updates.aspxSkip the details: Download the updates for your home computer or laptop from the Microsoft Update website now:

  http://update.microsoft.com/microsoftupdate

• IT professionals:
  

  http://technet.microsoft.com/security/bulletin/MS13-054

Windows Vista and Windows Server 2008 file information notes

• The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.
  
  

  Version	Product	Milestone	Service branch
  6.0.6002.18xxx	Windows Vista SP2 and Windows Server 2008 SP2	SP2	GDR
  6.0.6002.23xxx	Windows Vista SP2 and Windows Server 2008 SP2	SP2	LDR

• Service Pack 1 is integrated into the original release version of Windows Server 2008. Therefore, RTM milestone files apply only to Windows Vista. RTM milestone files have a 6.0.0000.xxxxxx version number.

• GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

• The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows Vista and of Windows Server 2008

For all supported x64-based versions of Windows Vista and of Windows Server 2008

Windows 7 and Windows Server 2008 R2 file information notes

• The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
  
  

  Version	Product	Milestone	Service branch
  6.1.7601.18xxx	Windows 7 and Windows Server 2008 R2	SP1	GDR
  6.1.7601.22xxx	Windows 7 and Windows Server 2008 R2	SP1	LDR

  
  

• The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows 7

For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2

For all supported IA-64-based versions of Windows Server 2008 R2

Windows 8 and Windows Server 2012 file information notesImportant Windows 8 and Windows Server 2012 hotfixes are included in the same packages. However, only "Windows 8" is listed on the Hotfix Request page. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 8" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.

• The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.
  
  

  Version	Product	Milestone	Service branch
  6.2.920 0.16 xxx	Windows 8 and Windows Server 2012	RTM	GDR
  6.2.920 0.20 xxx	Windows 8 and Windows Server 2012	RTM	LDR

• The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows 8

For all supported x64-based versions of Windows 8 and of Windows Server 2012

Applies toThis article applies to the following:

• Windows 8

• Windows RT

• Windows Server 2012

• Windows 7 Service Pack 1

• Windows Server 2008 R2 Service Pack 1

• Windows Vista Service Pack 2

• Windows Server 2008 Service Pack 2