Gentoo Security Advisory GLSA 200705-02 (freetype)

The remote host is missing updates announced in advisory GLSA 200705-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-1351

CVE-2008-1351 describes an SQL injection in the XOOPS Tutorials 2.1b module. The vulnerable entry point is printpage.php, where the tid parameter can be exploited to execute arbitrary SQL commands, reachable directly or via a printpage action to index.php. The associated references (Exploit-DB, S...

CVE-2008-1351

creationtimestamp| type| source ---|---|--- 2008-03-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5245...

Debian Security Advisory DSA 1351-1 (bochs)

The remote host is missing an update to bochs announced via advisory DSA 1351-1. OpenVAS Vulnerability Test $Id: deb13511.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1351-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian DSA-1454-1 : freetype - integer overflow

Greg MacManus discovered an integer overflow in the font handling of libfreetype, a FreeType 2 font engine, which might lead to denial of service or possibly the execution of arbitrary code if a user is tricked into opening a malformed font. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

[SECURITY] [DSA 1454-1] New freetype packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1454-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 07, 2008 http://www.debian.org/security/faq -...

openSUSE 10 Security Update : freetype2 (freetype2-3066)

This update of freetype2 fixes an integer overflow in the BDF font parsing code. This bug can be exploited only with user assistance to potentially execute arbitrary code. CVE-2007-1351 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

openSUSE 10 Security Update : xorg-x11-server (xorg-x11-server-3082)

Integer overflows in the XC-MISC extension of the X-server could potentially be exploited to execute code with root privileges CVE-2007-1003. Integer overflows in libX11 could cause crashes CVE-2007-1667. Integer overflows in the font handling of the X-server could potentially be exploited to...

CVE-2003-1351

The CVE-2003-1351 issue affects EditTag 1.1, exposed via edittag.cgi. It is a directory traversal vulnerability that allows remote attackers to read arbitrary files by passing a encoded path like "%2F.." in the file parameter. The vulnerability can lead to partial confidentiality impact by exposi...

Debian DSA-1351-1 : bochs - buffer overflow

Tavis Ormandy discovered that bochs, a highly portable IA-32 PC emulator, is vulnerable to a buffer overflow in the emulated NE2000 network device driver, which may lead to privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

VMSA-2007-0005:Updated Service Console packages (XFree86, UP and SMP kernels, Kerberos libraries) resolve security issues.

VMSA-2007-0005 Updated Service Console packages XFree86, UP and SMP kernels, Kerberos libraries resolve security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2007-0005 VMware Security AdvisorySynopsis: Updated Service Console packages XFree86, UP and SMP kernels,...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Dia before 0.96.1-6 have unspecified attack vectors and impact, probably involving the use of vulnerable FreeType libraries that contain CVE-2007-2754 and/or CVE-2007-1351...

Important: libXfont security update

1.2.2-1.0.2.el5 - Rebuild because of forgotten changelog entry. 1.2.2-1.0.1.el5 - Fix for bug 234058, cve-2207-1351/1352...

[slackware-security] freetype

New x11 and/or freetype and fontconfig packages are available for Slackware 10.1, 10.2, 11.0, and -current to fix security issues in freetype. Freetype was packaged with X11 prior to Slackware version 11.0. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE...

RHEL 3 / 4 / 5 : freetype (RHSA-2007:0150)

Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine. An integer overflow flaw was...

CentOS 3 / 4 / 5 : freetype (CESA-2007:0150)

Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine. An integer overflow flaw was...

CVE-2007-1351

Integer overflow in the bdfReadCharacters function in bdfread.c in 1 X.Org libXfont before 20070403 and 2 freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow...

CVE-2007-1351

CVE-2007-1351 is an integer overflow in the FreeType/bdf loader path: bdfReadCharacters in bdfread.c causes a heap overflow when parsing crafted BDF fonts. Affected products include X.Org libXfont before 20070403 and FreeType 2.3.2 and earlier. Exploitation could lead to remote code execution on ...

Important: XFree86 security update

4.3.0-120.EL.0.1 - Add oracle detection to Imake. 4.3.0-120.EL - add cve-2007-1351.patch 234056 4.3.0-119.EL - Add int-overflow.patch 231684 - comment out requirement on fonts-base as that is an unreleased change. 4.3.0-118.EL - Add cve-2007-1003.patch 232996 4.3.0-117.EL - Make xfs depend on...

[Full-disclosure] iDefense Security Advisory 04.03.07: Multiple Vendor X Server BDF Font Parsing Integer Overflow Vulnerability

Multiple Vendor X Server BDF Font Parsing Integer Overflow Vulnerability iDefense Security Advisory 04.03.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 03, 2007 I. BACKGROUND The X Window System or X11 is a graphical windowing system used on Unix-like systems. It is based on a...