Can font files be dangerous

Can font files be dangerous

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Can font files be dangerous Zakko 01-16-2008
Posted by Zakko on January 16, 2008, 2:56 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Some web sites talk about their fonts files as being clean or checked.

Does this mean some types of font file can be infected with malware?

Posted by Dick Margulis on January 16, 2008, 3:23 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Zakko wrote:
> Some web sites talk about their fonts files as being clean or checked.
>
> Does this mean some types of font file can be infected with malware?

Fonts can be malformed in a number of ways that create problems for the
user. Probably the most obvious is an older font that is far enough out
of spec that recent versions of Windows will refuse to load it. I'm not
aware of fonts carrying malware, so I would just read those as product
benefit claims--our fonts are high quality, basically.

Posted by Sebastian G. on January 16, 2008, 4:36 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Dick Margulis wrote:

> I'm not aware of fonts carrying malware, so I would just read

> those as product benefit claims--our fonts are high quality, basically.

I remember a bug in a webbrowser causing a buffer overflow with specially
crafted font files. Now, that was Netscape 4.0, which is quite a long time ago.

Without a bug, there's no specified way to include executable code in font
files.

Posted by David H. Lipman on January 16, 2008, 5:06 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Some web sites talk about their fonts files as being clean or checked.
|
| Does this mean some types of font file can be infected with malware?

Font files are none malicious.

However, there are Trojans that will hide in the Windows font folder.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Posted by Character on January 16, 2008, 6:38 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Zakko wrote:

> Some web sites talk about their fonts files as being clean or checked.
>
> Does this mean some types of font file can be infected with malware?

No, but I've accidentally created some otf fonts that, if
double-clicked, for some inexplicable reason result in a BSOD (Blue
Screen of Death)! No harm done, just very annoying.

- Character

Similar ThreadsPosted
How dangerous is DMA? February 29, 2008, 5:16 am
HPSBUX02303 SSRT071468 rev.1 - HP-UX Running X Font Server (xfs) Software, Remote Execution of Arbitrary Code January 15, 2008, 9:11 am
Dat files September 18, 2006, 5:59 pm
Recovering files February 16, 2005, 12:39 am
Websites with .dll files August 29, 2007, 6:24 pm
Integrity of Log Files October 4, 2008, 6:58 am
NTFS - System files... January 4, 2005, 2:21 pm
Is there a danger opening WMV files in XP? May 11, 2006, 6:52 am
how to log access to important files June 14, 2006, 9:27 am
Is it OK to Delete these files in the Windows 98 Folder??? August 12, 2004, 5:08 pm

The site map in XML format XML site map

Contact Us | Privacy Policy