Re: [cryptography] fonts and viruses

2015-12-15 Thread Vitezslav Cizek
Hi, * Dne Tuesday 15. December 2015, 13:23:31 [CET] Givon Zirkind napsal: > i've been researching this subject with little results. is it > possible to some how include a virus in a font? otf or ttf? Check out Mateusz "j00ru" Jurczyk's work: http://j00ru.vexillium.org/ Vita _

Re: [cryptography] fonts and viruses

2015-12-15 Thread Warren Kumari
Duqu exploited a vulnerability in the Windows TrueType font parser to gain kernel privs. !2013. Also some similar instances IIRC ~2011. W On Tue, Dec 15, 2015 at 7:23 AM Givon Zirkind wrote: > i've been researching this subject with little results. is it possible > to some how include a virus

Re: [cryptography] fonts and viruses

2015-12-15 Thread Kevin W. Wall
On Dec 15, 2015 9:49 AM, "Marcus Brinkmann" < marcus.brinkm...@ruhr-uni-bochum.de> wrote: > > I'd start here: > > http://www.cvedetails.com/vulnerability-list/vendor_id-9705/product_id-17354/opec-1/Pango-Pango.html > > But if you are looking for specific examples, I don't know any. > > What you are

Re: [cryptography] fonts and viruses

2015-12-15 Thread Marcus Brinkmann
I'd start here: http://www.cvedetails.com/vulnerability-list/vendor_id-9705/product_id-17354/opec-1/Pango-Pango.html But if you are looking for specific examples, I don't know any. What you are looking for is bugs in the font rendering libraries, which are system dependent. On 12/15/2015 01:

Re: [cryptography] fonts and viruses

2015-12-15 Thread Givon Zirkind
i've been researching this subject with little results. is it possible to some how include a virus in a font? otf or ttf? ___ cryptography mailing list cryptography@randombit.net http://lists.randombit.net/mailman/listinfo/cryptography