[VulnDiscuss] Re: Opentype font file causes Windows to restart.

Hello!

Indeed. We have tested it successfully (=restart) on the following 
platforms right now:

- Windows 2000 SP2, SP3 and SP3+all available windowsupdate.com patches
- Windows XP Home Gold, SP1, SP1+all available windowsupdate.com patches
- Windows XP Professional Gold, SP1, SP1+all available windowsupdate.com 
patches

We used the German and the English language versions of all products. 
However, the bluescreens are indeed different on Windows 2000 and XP. After 
a restart (power off and on -or- reset button) we also got the Windows XP 
request to report this critical problem to Microsoft. :-)

Other products and versions were not tested. "Mark Litchfield" 
<[email protected]> has reported in another Bugtraq message that Windows 
.NET server (which release?!? Beta? RC?) is not affected. So it looks like 
that this problem has been fixed in later Windows versions already -or- 
that the component is not included or deactivated. Anyone who can tell 
more? Thanks.

cheers,
Andreas

At 04:36 07.01.2003 +1300, Andrew wrote:
>Problem
>-------
>
>The attached OpenType font file will cause Windows to restart
>immediately when the file is opened by the default viewer (fontview).
>I doubt anyone would suspect a "harmless" little font file of being
>able to cause such a thing to happen!
>
>Software affected
>-----------------
>It has been tested on both Windows 2000 and Windows XP with exactly
>the same result -- an immediate restart.  Other versions of Windows
>are untested.
>
>Fix
>---
>No fix known.
>
>
>
>- Andrew Connell


-- 
Andreas Marx <[email protected]>, http://www.av-test.org
GEGA IT-Solutions GbR, Klewitzstr. 7, 39112 Magdeburg, Germany
Phone: +49 (0)391 6075466, Fax: +49 (0)391 6075469