CVE-2009-0231

The record

The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers an integer truncation and a heap-based buffer overflow, aka "Embedded OpenType Font Heap Overflow Vulnerability."

Affected packages

Related vulnerabilities

• CVE-2026-106432 The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value… CWE-681
• CVE-2026-98049 In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the… CWE-681
• CVE-2026-88387 LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in… CWE-681
• CVE-2026-77412 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-681
• CVE-2026-84970 A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++… CWE-681
• CVE-2026-82522 libjxl before 0.12 contains an integer underflow vulnerability in the container box… CWE-681
• CVE-2026-75145 FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the… CWE-681
• CVE-2026-19879 A flaw was found in Undertow, an HTTP server, within its HTTP response header writing… CWE-681