Hacker News Reader

Fonts are not executable files, those are the official redistributables by Microsoft to install those fonts on systems where they are missing. TrueType fonts are a highly complex file format though, so there have been plenty of RCEs due to broken font parsing in the past.

Fonts are not executables in the way you think they are. They do have code for hinting, but it is not executable in the sense of x86 or ARM code. It’s a custom bytecode designed for an interpreter. If a font is being distributed as an executable, that’s because someone’s wrapped it in an installer.

Maybe I misunderstand you: I believe they are saying that EDIT.EXE, an executable that edited text, used the Topaz font. Microsoft Word uses fonts, but those fonts aren't named "Word".

Yes and they're also extracted without execution if you install them on Linux. I believe they're self-extracting CABs