Microsoft recently added a new program to its Active Protection Program. The Advisory Initiative program gives partners up to 96 hours to provide protection for discovered vulnerabilities. Microsoft piloted the program with an advisory release on the Win32K TrueType font parsing engine, related to the Duqu malware (CVE-2011-3402) Duqu exploits a vulnerability in Windows in the way it parses TrueType fonts and it can create an open tunnel into a user’s computer. Despite this, Microsoft reports that they are currently seeing low customer impact at this time.”]
Source: https://blog.talosintelligence.com/2011/11/microsoft-security-advisory-2639658.html