logo

  •   Submit to to del.icio.us   Submit to to digg   submit to to reddit   submit to to StumbleUpon   submit to to Google   Submit to to Yahoo!

Category: blogs | Posted by Avatar Staff 196 days ago
Via: http://securitylabs.websense.com | Tags: reverse engineering embedded opentype decompression comments Discuss  
As security researchers, we regularly analyze many different types of files. It's important that we take the time to teach ourselves about unusual file formats, so that we can be prepared when a malicious attack occurs with an uncommon file type. One unusual file type that we recently studied is the EOT file format. A quick definition from Wikipedia explains: "Embedded OpenType (EOT) fonts are a compact form of OpenType fonts designed by Microsoft for use as embedded fonts on Web pages. These files usually use the extension '.eot'." Basically, EOT files are custom font files meant for Web pages. The tools used to create these fonts have mechanisms that can be built into the EOT files, such as subsetting and tethering, so that copying and reversing is difficult (more on this later).



addto Add this link to... report Bury 


Comments Who Voted Related Links
Copyright 2005-2008 Best of Security