114 matches found
RHEL 3 / 4 / 5 : freetype (RHSA-2008:0556)
Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 25th June 2008 The original packages for Red Hat Enterprise Linux 3...
GLSA-200806-10 : FreeType: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200806-10 FreeType: User-assisted execution of arbitrary code Regenrecht reported multiple vulnerabilities in FreeType via iDefense: An integer overflow when parsing values in the Private dictionary table in a PFB file, leading to...
RHEL 2.1 : freetype (RHSA-2008:0558)
Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 25th June 2008 The original packages distributed with this errata had a bug...
CentOS 3 / 4 / 5 : freetype (CESA-2008:0556)
Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 25th June 2008 The original packages for Red Hat Enterprise Linux 3...
Important: Red Hat Security Advisory: freetype security update
Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 25th June 2008 The original packages for Red Hat Enterprise Linux 3...
Important: Red Hat Security Advisory: freetype security update
Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 25th June 2008 The original packages distributed with this errata had a bug...
Fedora 8 : freetype-2.3.5-4.fc8 (2008-5430)
This update backports security fixes from upstream version 2.3.6 - CVE-2008-1806, CVE-2008-1807 and CVE-2008-1808. For further details, see: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=7 15 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=7 16...
CVE-2008-1808
CVE-2008-1808 : Multiple off-by-one errors in FreeType2 up to version 2.3.5 (pre-2.3.6) can be triggered by a crafted table in a Printer Font Binary (PFB) file or a crafted SHC instruction in a TrueType Font (TTF) file, leading to a heap-based buffer overflow and potential arbitrary code executio...
iDefense Security Advisory 06.10.08: Multiple Vendor FreeType2 Multiple Heap Overflow Vulnerabilities
iDefense Security Advisory 06.10.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 10, 2008 I. BACKGROUND FreeType2 is an open source library for parsing fonts that is used by many applications. This includes projects such as X.Org, Second Life, and the Sun Java JRE. For more...
CVE-2006-1808
The CVE-2006-1808 entry describes a Cross-site Scripting (XSS) vulnerability in Lifetype 1.0.3, exploitable via the show parameter in a Template operation of index.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Affected product: Lifetype 1.0.3. Root cause/s...
CVE-2002-1808
CVE-2002-1808 describes a cross-site scripting (XSS) flaw in Meunity Community System 1.1 . The vulnerability allows remote attackers to inject arbitrary web script or HTML by placing Javascript in an IMG tag during topic creation. The root cause, as stated, is insufficient input sanitization of ...
CVE-2005-1808
CVE-2005-1808 affects Firefly Studios Stronghold 2,
CVE-2004-1808
The CVE-2004-1808 issue concerns Extcompose in metamail, where the tool does not verify the output file before writing, permitting a local user to overwrite arbitrary files via a symlink attack. Affected component: Extcompose/m metamail (exact version not specified in provided documents). Root ca...
