5 ms·
This makes me curious; have there ever been security exploits that utilized the font rendering as an actual attack vector? To me it feels like font rendering sh
by iFreilicht 2y ago
This makes me curious; have there ever been security exploits that utilized the font rendering as an actual attack vector? To me it feels like font rendering should be pure (in the functional sense) and thus have no side-effects, but of course that doesn't mean anything in practice.
- bean-weevil 2y agoYes, pretty disastrously: https://kb.cert.org/vuls/id/354840/ https://kb.cert.org/vuls/id/354840/ As you have guessed, this used a rendering feature that was not pure.