Forgot your password?

Close
typodupeerror

+ - MS traces Duqu zero-day to font parsing in win32k->

Submitted by
yuhong
yuhong writes "MS has traced the Duqu zero-day to a vulnerability in font parsing in win32k. Many file formats like HTML, Office, and PDF support embedded fonts, and in NT4 and later fonts are parsed in kernel mode! Other possible attack vectors for example include web pages visited using web browsers that support embedded fonts without the OTS font sanitizer (which recent versions of Firefox and Chrome has adopted)."
Link to Original Source
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

MS traces Duqu zero-day to font parsing in win32k More

MS traces Duqu zero-day to font parsing in win32k

Comments Filter:

"We shall reach greater and greater platitudes of achievement." -- Richard J. Daley

Close