Can a Font File contain a Virus or Malware?



Marianne B.
07-10-2005, 12:21 AM
Can a font file, True Type or other, contain a virus or malware?

Thanks,

M.B.

Rick \Nutcase\ Rogers
07-10-2005, 12:21 AM
Hi Marianne,

I've not heard of such. Why do you ask this?

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org

"Marianne B." <anonymous@foobar.com> wrote in message
news:OPHymsgVFHA.3620@TK2MSFTNGP09.phx.gbl...
> Can a font file, True Type or other, contain a virus or malware?
>
> Thanks,
>
> M.B.
>
>
>
>
>
>

Detlev Dreyer
07-10-2005, 12:21 AM
"Marianne B." <anonymous@foobar.com> wrote:

> Can a font file, True Type or other, contain a virus or malware?

Yes, if this is a bitmap/raster font file (*.fon). These fonts are
executable files similar to 16-bit DLLs. Although containing resources
only, it's certainly no problem to add any code and to run from there.
On the other hand, I've never heard about such case.

--
d-d

Rick \Nutcase\ Rogers
07-10-2005, 12:21 AM
Interesting information Detlev, I wasn't sure if that would work. Like you,
I've not seen this exploited.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org

"Detlev Dreyer" <detdreyer@flashmail.com> wrote in message
news:4281E2F0.58929A5C@d-d.mvps.org...
> "Marianne B." <anonymous@foobar.com> wrote:
>
>> Can a font file, True Type or other, contain a virus or malware?
>
> Yes, if this is a bitmap/raster font file (*.fon). These fonts are
> executable files similar to 16-bit DLLs. Although containing resources
> only, it's certainly no problem to add any code and to run from there.
> On the other hand, I've never heard about such case.
>
> --
> d-d

Detlev Dreyer
07-10-2005, 12:21 AM
"Rick \"Nutcase\" Rogers" <rick@mvps.org> wrote:

> Interesting information Detlev, I wasn't sure if that would work.

There are two scenarios that work on such files, at least. If you are
interested in details, you may want to address this issue in DTS-L.
Although these are no secrets at all, I'd like to avoid any abuse
that might occur when posting in the public.

> Like you, I've not seen this exploited.

Yes, thank God.

--
d-d

Marianne B.
07-10-2005, 12:23 AM
In the past, I never paid much attention to font files, but now I am
using them a lot.
I noticed that, in some cases, 2 different files of the same exact font
can be different sizes, and I thought that the larger file might contain
a virus.
Also, there are a lot of free fonts available on the Web, but I don't
want to be downloading files from obscure websites if they could
contain malware or viruses.
An ounce of prevention is worth a pound of cure, especially when it
comes to scumware.

M.B.

"Rick "Nutcase" Rogers" <rick@mvps.org> wrote in message
news:uWQBCRhVFHA.2560@TK2MSFTNGP10.phx.gbl...
> Hi Marianne,
>
> I've not heard of such. Why do you ask this?
>
>
> "Marianne B." <anonymous@foobar.com> wrote in message
> news:OPHymsgVFHA.3620@TK2MSFTNGP09.phx.gbl...
> > Can a font file, True Type or other, contain a virus or malware?
> >
> > Thanks,
> >
> > M.B.
> >
>

Rick \Nutcase\ Rogers
07-10-2005, 12:23 AM
Hi Marianne,

As mentioned by Detlev, conceptually it is possible, though in reality I've
not seen this exploited. Any updated AV program with heuristics scanning
would normally be able to pick up something like this.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org

"Marianne B." <anonymous@foobar.com> wrote in message
news:uKYMQYqVFHA.612@TK2MSFTNGP12.phx.gbl...
> In the past, I never paid much attention to font files, but now I am
> using them a lot.
> I noticed that, in some cases, 2 different files of the same exact font
> can be different sizes, and I thought that the larger file might contain
> a virus.
> Also, there are a lot of free fonts available on the Web, but I don't
> want to be downloading files from obscure websites if they could
> contain malware or viruses.
> An ounce of prevention is worth a pound of cure, especially when it
> comes to scumware.
>
> M.B.
>
> "Rick "Nutcase" Rogers" <rick@mvps.org> wrote in message
> news:uWQBCRhVFHA.2560@TK2MSFTNGP10.phx.gbl...
>> Hi Marianne,
>>
>> I've not heard of such. Why do you ask this?
>>
>>
>> "Marianne B." <anonymous@foobar.com> wrote in message
>> news:OPHymsgVFHA.3620@TK2MSFTNGP09.phx.gbl...
>> > Can a font file, True Type or other, contain a virus or malware?
>> >
>> > Thanks,
>> >
>> > M.B.
>> >
>>
>
>
>


Can a Font File contain a Virus or Malware?