Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

A year of Windows kernel font fuzzing #1: the results

projectzero.google | blog | #fuzzing | #windows | #kernel | #truetype | #opentype | #font-parsing

Summary

Part one of a series on a year of at-scale fuzzing that found 16 vulnerabilities in Windows kernel TrueType and OpenType font handling, presenting results and bug collision case studies.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
A year of Windows kernel font fuzzing #2: the techniques
Second part of a series on a year-long fuzzing effort against the Windows kernel font engine, detailing the techniques and design decisions that made the project effective.
blog · projectzero.google
The Windows Registry Adventure #7: Attack surface analysis
Part 7 of the Windows Registry Adventure series, mapping which Windows components parse registry data and identifying the most promising attack surface for deeper research.
blog · projectzero.google
Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages
Part one of a macOS audio series: building a fuzzer for CoreAudio by sending Mach messages, covering the attack surface, harness design, and early results.
blog · projectzero.google
Using Binary Diffing to Discover Windows Kernel Memory Disclosure Bugs
A Project Zero post on using binary patch diffing to uncover Windows kernel memory disclosure bugs, including methodology, tooling, and notable findings from this approach.
blog · projectzero.google
Notes on Windows Uniscribe Fuzzing
A Project Zero post on fuzzing Windows' Uniscribe font library, which yielded 29 CVEs fixed in March 2017, covering the library's history and the fuzzing approach.
blog · projectzero.google
Attacking the Windows NVIDIA Driver
A Project Zero post on attacking NVIDIA's Windows kernel graphics driver, covering several of the 16 vulnerabilities found during this GPU attack surface research.
back