VOLT Security Issue

[Erwin Denissen]

Earlier this week the program manager for Microsoft's Typography Group posted a message to the OpenType list:

VOLT includes various supplemental files including a version of USP10.dll (AKA as Uniscribe) users can optionally use that .dll for font testing fonts (for example by copying it into a folder along with a copy of notepad.exe).

Based on today's security advisory we would recommend avoiding using that DLL. For more details see Microsoft Security Bulletin MS10-063 - Critical.

In the coming days we'll replace the current VOLT download with one that does not include Uniscribe.

Cheers, Si

This vulnerability does not affect our software, so no worries if you've never heard of Microsoft VOLT

[Bhikkhu Pesala]

And no worries if you have heard of it, but don't use it.