Does Noscript protects against the new Windows-Vulnerability

[Guest]

Microsoft released a Patch for a new Font-Driver-Vulnerability for all Windows Versions.
https://technet.microsoft.com/de-de/lib ... y/ms15-078

Noscript blocks special fonts by default, does it protects against this attack? Is firefox even affected?
Thanks

[therube]

Seems the Adobe Type Manager Font Driver (ATMFD.DLL) is where the vulnerability lies, & where I'm looking in Mozilla (assuming I know where to look & what I'm looking at - don't bet on it!) I'm not seeing where atmfd.dll is loaded into any Mozilla process space, so I'll assume that Mozilla browsers would be unaffected, in general.

(Now if you used something like "IE Tab"...)

But then I'm not seeing where IE (IE8, XP) is loading it either?
So maybe, who knows? Maybe it doesn't load until needed or something like that?

In any case, regardless of whether NoScript helps in this situation or not, seemingly you will be safer, in general, when blocking fonts in NoScript.