News for hackers. Stuff that matters.

A comment on Fonts eat a bullet in Microsoft security patch. Parent comment

Re:Fonts eat a bullet in Microsoft security patch by DannyBee on Monday December 17, 2012 @10:25AM (#4932590)
I think the best part of this is the phrase "kernel font handling code"

Of all the things to put into kernel space ....

[ Parent | on HN ]
Re:Fonts eat a bullet in Microsoft security patch by codewright on Monday December 17, 2012 @01:24PM (#4933526)
>Of all the things to put into kernel space ....

It's Windows man, this is an old story now.

[ Parent | on HN ]
Re:Fonts eat a bullet in Microsoft security patch by justinschuh on Tuesday December 18, 2012 @09:43AM (#4937658)
Yeah, the GDI is pretty horrible. But in Microsoft's defense, those decisions were made almost 20 years ago for NT4, when prevailing views on security and stability were very different from today. The post DX10 graphics pipeline doesn't do things like this, and is really quite sane and robust. Unfortunately, you need Vista+ for DX10, and even then you still get saddled with the local GDI attack surface.
[ Parent | on HN ]