Page 1 of 1
Does Noscript protects against the new Windows-Vulnerability
Posted: Wed Jul 22, 2015 1:45 pm
by Guest
Microsoft released a Patch for a new Font-Driver-Vulnerability for all Windows Versions.
https://technet.microsoft.com/de-de/lib ... y/ms15-078
Noscript blocks special fonts by default, does it protects against this attack? Is firefox even affected?
Thanks
Re: Does Noscript protects against the new Windows-Vulnerabi
Posted: Wed Jul 22, 2015 4:05 pm
by therube
Seems the Adobe Type Manager Font Driver (ATMFD.DLL) is where the vulnerability lies, & where I'm looking in Mozilla (assuming I know where to look & what I'm looking at - don't bet on it!) I'm not seeing where atmfd.dll is loaded into any Mozilla process space, so I'll assume that Mozilla browsers would be unaffected, in general.
(Now if you used something like "IE Tab"...)
But then I'm not seeing where IE (IE8, XP) is loading it either?
So maybe, who knows? Maybe it doesn't load until needed or something like that?
In any case, regardless of whether NoScript helps in this situation or not, seemingly you will be safer, in general, when blocking fonts in NoScript.