Ah, actually, a true type font can contain a virus and one that directly exploits vulnerabilities in the Windows Kernel. Take a look at https://threatpost.com/of-truetype-font-vulnerabilities-and-the-windows-kernel/101263/ which states:

"Attacks like these are executed via an embedded malicious font file dropped into an Office document, such as a Word file. Once the user opens the malicious file—delivered either via a spear phishing email or over the Web—the exploit targets a vulnerability in kernel-mode drivers that improperly handle malicious TrueType font files."

So the question remains for dafont: Do you actively inspect your fonts for malicious code in your fonts?

G.