CVE-2011-2004: Microsoft Windows 7

High severity, CVSS 7.1. EPSS: 24.6% chance of exploitation in the next 30 days.

Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a crafted TrueType font file, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2011-3402.

Affected products

• Microsoft Windows 7: affected versions not specified
• Microsoft Windows Server 2008: version r2 only

Published 2011-11-08. Last modified 2026-06-16.