CVE-2015-1133

CVE-2015-1133 concerns the fontd component of Apple Type Services (ATS) on macOS, where local privilege escalation is possible on affected builds prior to macOS 10.10.3. The description indicates an unspecified attack vector and notes this as a separate issue from other CVEs in the same family (1...

Oracle Solaris Third-Party Patch Update : freetype (multiple_denial_of_service_dos1)

The remote Solaris system is missing necessary patches to address security updates : - FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap read operation and memory corruption or possibly...

openSUSE Security Update : freetype2 (openSUSE-SU-2012:0489-1)

Specially crafted font files could cause buffer overflows in freetype %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-220. The text description of this plugin is C SUSE LLC...

CVE-2013-1133

Cisco Unified Communications Manager CUCM 8.6 before 8.62asu2, 8.6 BE3k before 8.64 BE3k, and 9.x before 9.01 allows remote attackers to cause a denial of service CPU consumption and GUI and voice outages via malformed packets to unused UDP ports, aka Bug ID CSCtx43337...

CVE-2013-1133

CVE-2013-1133 affects Cisco Unified Communications Manager (CUCM) 8.6 before 8.6(2a)su2, 8.6 BE3k before 8.6(4) BE3k, and 9.x before 9.0(1). The vulnerability enables remote, unauthenticated attackers to cause a denial of service (CPU consumption, GUI and voice outages) by sending malformed packe...

Fedora Update for mingw-freetype FEDORA-2013-1114

Check for the Version of mingw-freetype OpenVAS Vulnerability Test Fedora Update for mingw-freetype FEDORA-2013-1114 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Mandriva Update for freetype2 MDVSA-2012:057 (freetype2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 201204-04 (FreeType)

The remote host is missing updates announced in advisory GLSA 201204-04. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

DEBIAN-CVE-2012-1133

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap write operation and memory corruption or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font...

CVE-2012-1133

CVE-2012-1133 affects FreeType prior to 2.4.9 and is triggered when processing font data (e.g., BDF fonts) in Mozilla Firefox Mobile and other products. The issue can cause a denial of service via invalid heap write and memory corruption and may possibly lead to arbitrary code execution. Affected...

SuSE 10 Security Update : freetype2 (ZYPP Patch Number 8039)

Specially crafted font files could have caused buffer overflows in freetype. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

FreeBSD : freetype -- multiple vulnerabilities (462e2d6c-8017-11e1-a571-bcaec565249c)

The Freetype project reports : Multiple vulnerabilities exist in freetype that can result in application crashes and remote code execution. Please review the details in each of the CVEs for additional information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

Ubuntu Update for linux USN-1133-1

Ubuntu Update for Linux kernel vulnerabilities USN-1133-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11331.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux USN-1133-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1133-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1133

Tiki Wiki CMS Groupware is affected by multiple SQL injection vulnerabilities in the 4.x series prior to 4.2, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors, with likely exploitation paths through tiki-searchindex.php and tiki-searchresults.php. Impact per sou...

CVE-2009-1133

CVE-2009-1133 corresponds to a heap-based buffer overflow in Microsoft Remote Desktop Connection (mstsc/ mstscax.dll) affecting RDP clients (RDP 5.0–6.1 on Windows and Mac 2.0). The underlying flaw occurs during parsing of data from the RDP server, allowing a remote attacker to execute arbitrary ...

Microsoft Remote Desktop Connection Remote Code Execution Vulnerability (969706)

This host is missing a critical security update according to Microsoft Bulletin MS09-044. OpenVAS Vulnerability Test $Id: secpodms09-044.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Remote Desktop Connection Remote Code Execution Vulnerability 969706 Authors: Sharath S Updated By: Madhuri D...

MS09-044: Vulnerabilities in Remote Desktop Connection Could Allow Remote Code Execution (Mac OS X)

The remote host contains a version of the Remote Desktop client that contains several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host. To exploit these vulnerabilities, an attacker would need to trick a user of the remote host into connecting to a rogue RDP...

Microsoft Remote Desktop Connection DWORD Heap Overflow (MS09-044; CVE-2009-1133)

A remote code execution vulnerability has been reported in the way Microsoft Remote Desktop Connection processes specific parameters returned by the RDP server. The Microsoft Remote Desktop Protocol RDP provides remote display and input capabilities over network connections for Microsoft...

CVE-2008-1133

CVE-2008-1133 affects Drupal 6.0 where the Drupal.checkPlain function escapes only the first instance of a character in ECMAScript, enabling remote XSS attacks. The vulnerability is described across multiple sources as allowing XSS via user-supplied content that is not fully escaped. The provided...