Description
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Windows中自带的ATMFD Adobe字体驱动处理.OTF文件中的畸形CMAP目录项时存在漏洞，攻击者可将特制的OpenType字体保存在网络共享上，当用户浏览到Windows Explorer中的共享时，将触发受影响的控制路径，从而完全控制受影响的系统。
Microsoft Windows OpenType Font (OTF)驱动程序无效数组远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://support.microsoft.com/en-us/topic/ms10-091-vulnerabilities-in-the-opentype-font-otf-format-driver-could-allow-remote-code-execution-f718ac75-3308-e6b6-bc0e-41cc92292c28
https://www.cnblogs.com/mrhonest/p/10907068.html
https://www.hkcert.org/tc/security-bulletin/microsoft-windows-opentype-font-stack-overflow-vulnerability
https://www.tenable.com/plugins/nessus/51163
https://www.cvedetails.com/microsoft-bulletin/ms10-091/
https://learn.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-026
https://www.cnvd.org.cn/patchInfo/show/26488