Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2016-7259: An empty file into the blue

blog.quarkslab.com | vulnerability | CVE-2016-7259 | #fuzzing | #windows | #cve | #kernel | #null-pointer-dereference | #win32k

Summary

Binary analysis of CVE-2016-7259: loading a PostScript Type 1 font whose companion .pfb file is empty triggers a NULL pointer dereference in win32k's NtGdiAddFontResourceW path, crashing Windows.
Published
Collected

original ↗

Related coverage

  1. CVE-2026-66804 PoC: Windows Cross Device virtual camera local privilege escalation to SYSTEM (github.com)
  2. Reverse Engineering the Win32k Type Isolation Mitigation (blog.quarkslab.com)
  3. Remote Denial-of-Service on CycloneTCP : CVE-2021-26788 (blog.quarkslab.com)
  4. CVE-2020-0069: Autopsy of the Most Stable MediaTek Rootkit (blog.quarkslab.com)
  5. Backslash Powered Scanning: hunting unknown vulnerability classes (portswigger.net)
  6. A GUID is Not a Credential: Unauthenticated RCE in Veeam Service Provider Console (bishopfox.com)

back