11 ms·
The browser shouldn't really matter here, Windows renders fonts on kernel-level anyway.
by forgotmypassw 11y ago
The browser shouldn't really matter here, Windows renders fonts on kernel-level anyway.
- __kmem__ 11y agoYeah but Chrome has skia which is a built from scratch ui lib. So IE and maybe firefox.
- sp332 11y agoNot all browsers use Windows' font rendering.
- pixl97 11y agoI would still be concerned that a 'trivial' exploit in another browser, that would normally not lead to exploitation could cause a problem. For example user tricks chrome in to saving a file in a non-standard place, Explorer reads file and executes payload while displaying preview.
- sp332 11y ago"Got an attack that only works in MS Edge but victim's in Chrome? No worries, use the microsoft-edge: protocol to jump over to that browser." https://twitter.com/ericlaw/status/622157163398430720 https://twitter.com/ericlaw/status/622157163398430720
- madmoose 11y agoBoth Chrome and Firefox pass web fonts through OTS [1] before rendering them, so hopefully that mitigates the threat. [1] https://github.com/khaledhosny/ots https://github.com/khaledhosny/ots
- JupiterMoon 11y agoIs there a technical reason why this is done?
- NullCharacter 11y agoGood question. Every time there's a font vulnerability, it gets asked, and for good reason. I like this answer the best: http://seenonslash.com/node/3658 http://seenonslash.com/node/3658 Interesting quote on their mindset at the time: "Due to the modular design of Windows NT moving Window Manager and GDI to kernel mode will make no difference to the security subsystem or to the overall security of the operating system this will also have no effect on the C2 or E3 security certification evaluation, other than making it easier to document the internal architecture of Windows NT." From: https://msdn.microsoft.com/en-us/library/cc750820.aspx https://msdn.microsoft.com/en-us/library/cc750820.aspx