https://tsecurity.de/de/32301/IT+Reverse+Engineering/Sicherheitsl%C3%BCcken/Proof+of+Concept/%5Bdos%5D+-+Windows+Kernel+ATMFD.DLL+OTF+Font+Processing+Pool-Based+Buffer+Overflow+%28MS16-026%29/
[dos] - Windows Kernel ATMFD.DLL OTF Font Processing Pool-Based Buffer Overflow (MS16-026)