Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Notes on Windows Uniscribe Fuzzing

projectzero.google | blog | #vulnerability-research | #fuzzing | #microsoft | #windows | #fonts | #project-zero | #uniscribe

Summary

A Project Zero post on fuzzing Windows' Uniscribe font library, which yielded 29 CVEs fixed in March 2017, covering the library's history and the fuzzing approach.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
In-Console-Able
A Google Project Zero post describing a Windows security bug that weakens sandbox-style restrictions and could aid sandbox escape research.
research · projectzero.google
[CVE-2014-3196] Did the “Man With No Name” Feel Insecure?
A Google Project Zero post on CVE-2014-3196, a Windows Chrome bug fixed in M38 that served as an early link in a potential exploit chain.
blog · projectzero.google
A year of Windows kernel font fuzzing #2: the techniques
Second part of a series on a year-long fuzzing effort against the Windows kernel font engine, detailing the techniques and design decisions that made the project effective.
blog · projectzero.google
A year of Windows kernel font fuzzing #1: the results
Part one of a series on a year of at-scale fuzzing that found 16 vulnerabilities in Windows kernel TrueType and OpenType font handling, presenting results and bug collision case studies.
blog · projectzero.google
Owning Internet Printing - A Case Study in Modern Software Exploitation
A Google Project Zero case study demonstrating a complete exploit chain against the CUPS internet printing service.
blog · projectzero.google
Dude, where’s my heap?
A Google Project Zero post examining heap spraying and heap address randomization, and how browser exploits can still succeed against them.
back