3 ms·
It's not just remote code execution; it's that this bug triggers in kernel font handling code. So, it bypasses application sandboxes and any other user space pr
by justinschuh 14y ago
It's not just remote code execution; it's that this bug triggers in kernel font handling code. So, it bypasses application sandboxes and any other user space protections.
- DannyBee 14y agoI think the best part of this is the phrase "kernel font handling code" Of all the things to put into kernel space ....
- codewright 14y ago>Of all the things to put into kernel space .... It's Windows man, this is an old story now.
- justinschuh 14y agoYeah, the GDI is pretty horrible. But in Microsoft's defense, those decisions were made almost 20 years ago for NT4, when prevailing views on security and stability were very different from today. The post DX10 graphics pipeline doesn't do things like this, and is really quite sane and robust. Unfortunately, you need Vista+ for DX10, and even then you still get saddled with the local GDI attack surface.