CVE-2016-7259: An empty file into the blue

CVE

CVE-2016-7259

Published

2016-12-13 23:00

Collected

2026-07-08 12:37

---
id: 4533
title: "CVE-2016-7259: An empty file into the blue"
cve: CVE-2016-7259
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/cve-2016-7259-an-empty-file-into-the-blue.html"
published_at: "2016-12-13T23:00:00Z"
tags: ["fuzzing", "windows", "cve", "kernel", "null-pointer-dereference", "win32k"]
phying_url: "https://phying.com/item/4533"
lang: en
---

# CVE-2016-7259: An empty file into the blue

## Summary

Binary analysis of CVE-2016-7259: loading a PostScript Type 1 font whose companion .pfb file is empty triggers a NULL pointer dereference in win32k's NtGdiAddFontResourceW path, crashing Windows.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **CVE:** CVE-2016-7259
- **Published:** 2016-12-13T23:00:00Z
- **Original:** https://blog.quarkslab.com/cve-2016-7259-an-empty-file-into-the-blue.html
- **Phying News:** https://phying.com/item/4533