[h=1]Microsoft Security Bulletin MS12-078 - Critical[/h][h=2]Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2783534)[/h] Published: Tuesday, December 11, 2012 | Updated: Thursday, December 20, 2012 Version: 2.0 [h=3]General Information[/h][h=4]Executive Summary[/h]This security update resolves one publicly disclosed vulnerability and one privately reported vulnerability in Microsoft Windows. The more severe of these vulnerabilities could allow remote code execution if a user opens a specially crafted document or visits a malicious webpage that embeds TrueType or OpenType font files. An attacker would have to convince users to visit the website, typically by getting them to click a link in an email message that takes them to the attacker's website. This security update is rated Critical for all supported releases of Microsoft Windows (except Server Core installations, which are rated Important). For more information, see the subsection, Affected and Non-Affected Software, in this section.