Microsoft Windows Fontview Denial of Service Vulnerability
BID:6536
Info
Microsoft Windows Fontview Denial of Service Vulnerability
| Bugtraq ID: | 6536 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jan 06 2003 12:00AM |
| Updated: | Jan 06 2003 12:00AM |
| Credit: | Discovery is credited to Andrew <[email protected]>. |
| Vulnerable: |
Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP 64-bit Edition SP1 Microsoft Windows XP 64-bit Edition Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server |
| Not Vulnerable: |
Microsoft Windows NT Workstation 4.0 SP6a Microsoft Windows NT Server 4.0 SP6a Microsoft Windows NT Enterprise Server 4.0 SP6a Microsoft Windows 98SE Microsoft Windows .NET Enterprise Server RC2 |
Discussion
Microsoft Windows Fontview Denial of Service Vulnerability
Microsoft Windows is vulnerable to a denial of service condition when attempting to view certain OpenType fonts (.otf). When a malformed font file is viewed with the default Windows font viewer, it will cause the system to Blue Screen and reboot.
The exact cause of this issue is not currently known, however, this record will be updated if and when more details become available.
Microsoft Windows is vulnerable to a denial of service condition when attempting to view certain OpenType fonts (.otf). When a malformed font file is viewed with the default Windows font viewer, it will cause the system to Blue Screen and reboot.
The exact cause of this issue is not currently known, however, this record will be updated if and when more details become available.
Exploit / POC
Microsoft Windows Fontview Denial of Service Vulnerability
The following exploit code was provided:
The following exploit code was provided:
Solution / Fix
Microsoft Windows Fontview Denial of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Microsoft Windows Fontview Denial of Service Vulnerability
References:
References:
- Opentype font file causes Windows to restart. (Andrew
- RE: Opentype font file causes Windows to restart. ("Armstrong, Richard"