WINDOWS UPDATE breaks Quark, Corel, who knows what else?

Primary tabs

20 posts / 0 new
Last post
Thomas Phinney's picture
Offline
Joined: 3 Sep 2002 - 11:00am
WINDOWS UPDATE breaks Quark, Corel, who knows what else?
0

If you use OpenType fonts with PS outlines (.otf) or PostScript Type 1 fonts, reportedly the latest Windows update is a bit dangerous. Read this before you decide to install!

http://graphics-unleashed.unleash.com/2012/12/windows-update-kb2753842-w...

NOTE: I have not verified this in person, as I don't use Corel or Quark apps. I also don't yet know whether any other major apps may be affected.

Marc Oxborrow's picture
Offline
Joined: 26 Apr 2002 - 2:17pm
0

Thanks for the link, Thomas. A number of my PC-using colleagues complained today that their Powerpoint presentations no longer properly display our OpenType corporate font.

J. Tillman's picture
Offline
Joined: 27 Sep 2009 - 11:31am
0

Problems all over...
Serif Page Plus forms:
http://forums.serif.com/showthread.php?t=124785
Adobe forums:
http://forums.adobe.com/message/4917852
Microsoft forums:
http://answers.microsoft.com/en-us/windows/forum/windows_7-windows_updat...

Microsoft screwed up and they need to fix this!

James Michaels's picture
Offline
Joined: 6 Mar 2010 - 12:54am
0

Thanks for the warning. I use a Mac but I'm passing the message along to some clients who use PCs to view files I send them such as PowerPoints.

Thomas Phinney's picture
Offline
Joined: 3 Sep 2002 - 11:00am
0

Apparently PowerPoint is affected in presentation mode only. Extra dangerous as one could not know there was a problem until trying to actually present. Ouch.

James Michaels's picture
Offline
Joined: 6 Mar 2010 - 12:54am
0

Yikes.

J. Tillman's picture
Offline
Joined: 27 Sep 2009 - 11:31am
0

Article at Infoworld, but no comment from Microsoft yet.
http://www.infoworld.com/t/microsoft-windows/buggy-microsoft-patch-causi...

Thomas Phinney's picture
Offline
Joined: 3 Sep 2002 - 11:00am
0

This also affects Flash authoring, and the Flexi sign design app, it seems.

Zuhair Albazi's picture
Offline
Joined: 7 Apr 2009 - 3:53pm
0

Thank you Thomas.
I spend my whole day to correct the problem, uninstalled and installed several things. Just came across your this thread and knew the reason of the problem. My all documents formatting appeared to be destroyed in MS Word 2010.
After reading this I also uninstalled all the updates along with the above mentioned one and re-installed the MS Word 2010 but in vain.
I have to wait a few days and see if Microsoft releases any fix. The other way is to re-install Windows XP and every thing, quite a long work.
MZ,

Thomas Phinney's picture
Offline
Joined: 3 Sep 2002 - 11:00am
0

All the details in my blog post:
http://www.thomasphinney.com/2012/12/windows-security-patch/

Known affected apps, how to uninstall, how to avoid installation, etc.

John Savard's picture
Offline
Joined: 23 Nov 2009 - 8:42pm
0
Russell McGorman's picture
Joined: 25 May 2006 - 10:01am
0

Important question, I suppose: Is the use of fonts as a vector for distributing malware and viruses more than a theoretical issue?

Nick Shinn's picture
Offline
Joined: 8 Jul 2003 - 11:00am
0

I’m planning to release my next typeface in .ttf format only, rather than .otf—for issues concerning screen rendering—this news suggest another reason.

Ryan Maelhorn's picture
Offline
Joined: 24 Nov 2011 - 11:30am
0

Interesting, Nick.

phrostbyte64's picture
Offline
Joined: 8 Oct 2008 - 10:38pm
0

So what, if anything, is Microsoft doing about the issue. Are they wanting sales in Apple products to increase?

Justin Callaghan's picture
Joined: 10 Oct 2003 - 12:49am
0

Bear in mind, this isn't the first Windows update to fix security bugs in its font-handling code, apparently it's just the first one to break functionality. And from what I can gather, this latest vulnerability affects TrueType fonts as well; the update only breaks OTF fonts since they typically use a different system rasterizer and API call. But the overall threat does seem more serious now that every major browser supports webfonts, so simply visiting a website could load a malicious font.

David Berlow's picture
Offline
Joined: 19 Jul 2004 - 6:31pm
0

"I’m planning to release my next typeface in .ttf format only, rather than .otf—for issues concerning screen rendering—..."

Nick, I think that's trowing the baby out wit da bat water. I'm sure they'll fix it soon, with the main reason to support .otf on windows being issues concerning screen rendering of .ttfs.

These font security patches sure are important to keep us all safe from malicious fonts.

Juergen Weltin's picture
Offline
Joined: 13 Jan 2006 - 6:31am
0

{…}

Russell McGorman's picture
Joined: 25 May 2006 - 10:01am
0

anyone from Microsoft who can comment?

.... Nevermind . All better.

Thanks Thomas

Thomas Phinney's picture
Offline
Joined: 3 Sep 2002 - 11:00am
0

Yes, all fixed now. Microsoft jumped on it fairly quickly. Nine days from release of bad patch to release of fixed patch.