Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

One font vulnerability to rule them all #1: Introducing the BLEND vulnerability

projectzero.google | research | #vulnerability-research | #fonts | #project-zero | #adobe-reader | #atmfd | #charstring

Summary

A Google Project Zero post introducing the BLEND Charstring vulnerability affecting Adobe Reader's CoolType library and Windows' ATMFD driver.
Published
Collected

original ↗

Related coverage

research · projectzero.google
Finding and exploiting ntpd vulnerabilities
A Google Project Zero guest post telling how one of the researchers found and exploited vulnerabilities in the ntpd network time server.
research · projectzero.google
[CVE-2014-3196] Did the “Man With No Name” Feel Insecure?
A Google Project Zero post on CVE-2014-3196, a Windows Chrome bug fixed in M38 that served as an early link in a potential exploit chain.
blog · projectzero.google
Owning Internet Printing - A Case Study in Modern Software Exploitation
A Google Project Zero case study demonstrating a complete exploit chain against the CUPS internet printing service.
blog · projectzero.google
In-Console-Able
A Google Project Zero post describing a Windows security bug that weakens sandbox-style restrictions and could aid sandbox escape research.
blog · projectzero.google
A Tale of Two Exploits
A Google Project Zero deep dive into the exploitation techniques used against a Flash Player scripting vulnerability.
blog · projectzero.google
Taming the wild copy: Parallel Thread Corruption
A Google Project Zero post on a 'wild copy' parallel thread memory corruption bug and its exploitation.
back