A victim who opens a document or even a webpage that contains a malicious embedded OpenType font file can be attacked thanks to this vulnerability.
http://www.theregister.co.uk/2015/07/20/windows_microsoft_emergency_patch/