3 ms·
The font names are edit.exe? I always found it strange that fonts are executables and yet we hear so few uses of fonts as malware. The Linux repo for Ms fonts
by chaxor 3y ago
The font names are edit.exe?
I always found it strange that fonts are executables and yet we hear so few uses of fonts as malware.
The Linux repo for Ms fonts seems like such a perfect way to get RCE on Linux computer due to the number of people that need some crappy Times New Roman for a paper submission requirement. They're even called TimesNewRoman.exe or Arial.exe.
- TonyTrapp 3y agoFonts are not executable files, those are the official redistributables by Microsoft to install those fonts on systems where they are missing. TrueType fonts are a highly complex file format though, so there have been plenty of RCEs due to broken font parsing in the past.
- colejohnson66 3y agoFonts are not executables in the way you think they are. They do have code for hinting, but it is not executable in the sense of x86 or ARM code. It’s a custom bytecode designed for an interpreter. If a font is being distributed as an executable, that’s because someone’s wrapped it in an installer.
- wolverine876 3y agoMaybe I misunderstand you: I believe they are saying that EDIT.EXE, an executable that edited text, used the Topaz font. Microsoft Word uses fonts, but those fonts aren't named "Word".
- LocalH 3y agoYes and they're also extracted without execution if you install them on Linux. I believe they're self-extracting CABs