Microsoft has released an advisory and a fix for a zero-day vulnerability. The vulnerability resides in most supported versions of Windows, including Windows XP, Vista and Windows 7. The problem stems from the way Windows parses certain font types. Microsoft says it is aware of targeted attacks exploiting this flaw, but that it believes few users have been affected. An attacker who successfully exploited this vulnerability could run arbitrary code, install programs; view, change, or delete data; or create new accounts with full user rights.”]
Source: https://krebsonsecurity.com/2011/11/microsoft-issues-stopgap-fix-for-duqu-flaw/