The host is missing a critical security update according to Microsoft security bulletin, MS13-060. The update is required to fix code execution vulnerability. The flaw is present in the Unicode Script Processor implementation in USP10.DLL in Microsoft Windows, which is fails to validate crafted OpenType font. Successful exploitation could allow an attacker to execute arbitrary code on the system.