That sounds super mega bad. How heavily fuzzed are font libraries on non-Microso... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

astrodust on July 20, 2015 | parent | context | favorite | on: Vulnerability in Microsoft Font Driver Could Allow...

That sounds super mega bad.

How heavily fuzzed are font libraries on non-Microsoft platforms?

anon1385 on July 20, 2015 | [–]

This was just the other week: http://yahoo-security.tumblr.com/post/123981052855/font-pars...

Scuds on July 20, 2015 | [–]

Not nearly enough apparently

iOS 8.4 security release notes: https://support.apple.com/en-us/HT204941

FontParser

Impact: Processing a maliciously crafted font file may lead to an unexpected application termination or arbitrary code execution

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact