Re:Vulnerability in Microsoft Font Driver Could Allow Remote...
by sp332 on Monday July 20, 2015 @03:15PM
(#9918320)
Not all browsers use Windows' font rendering.
[ Parent
| on HN ]
Re:Vulnerability in Microsoft Font Driver Could Allow Remote...
by pixl97 on Monday July 20, 2015 @03:43PM
(#9918497)
I would still be concerned that a 'trivial' exploit in another browser, that would normally not lead to exploitation could cause a problem. For example user tricks chrome in to saving a file in a non-standard place, Explorer reads file and executes payload while displaying preview.
Re:Vulnerability in Microsoft Font Driver Could Allow Remote...
by sp332 on Monday July 20, 2015 @03:52PM
(#9918567)
"Got an attack that only works in MS Edge but victim's in Chrome? No worries, use the microsoft-edge: protocol to jump over to that browser." https://twitter.com/ericlaw/status/622157163398430720