Of TrueType Font Vulnerabilities and the Windows KernelThis month's Patch Tuesday security bulletins called attention to vulnerabilities in the Windows kernel's font-processing engine, which had been exploited previously in Duqu and other targeted attacks.
Source:
Of TrueType Font Vulnerabilities and the Windows Kernel