136 matches found
MS13-072: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2845537)
The remote Windows host is running a version of Microsoft Office, Microsoft Word, Office Compatibility Pack, or Microsoft Word Viewer that is affected by the following remote code execution vulnerabilities : - A remote code execution vulnerability exists due to the way the XML parser used by Word...
Microsoft Word CVE-2013-3855 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Scientific Linux Security Update : freetype on SL4.x, SL5.x i386/x86_64
A heap-based buffer overflow flaw was found in the way the FreeType font rendering engine processed certain TrueType GX fonts. If a user loaded a specially crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute arbitrary code...
SuSE 10 Security Update : freetype2 (ZYPP Patch Number 7399)
Specially crafted font files could crash applications that use freetype2 to render the fonts. CVE-2010-3814 / CVE-2010-3855 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
CVE-2011-3855
CVE-2011-3855 affects the WordPress F8 Lite theme prior to version 4.2.2. The vulnerability is a cross-site scripting (XSS) flaw exposed through the theme’s s parameter, allowing an attacker to inject arbitrary script/HTML. Root cause, as stated in multiple connected entries, is improper handling...
CVE-2011-3855
Cross-site scripting XSS vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2011-3855
creationtimestamp| type| source ---|---|--- 2011-09-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36180...
Fedora Update for freetype FEDORA-2011-9525
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
openSUSE Security Update : freetype2 (openSUSE-SU-2011:0361-1)
Specially crafted font files could crash applications that use freetype2 to render the fonts CVE-2010-3814, CVE-2010-3855. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update freetype2-4080. The...
SuSE 10 Security Update : freetype2 (ZYPP Patch Number 7366)
Specially crafted font files could crash applications that use freetype2 to render the fonts. CVE-2010-3814 / CVE-2010-3855 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
SuSE 11.1 Security Update : freetype2 (SAT Patch Number 4089)
Specially crafted font files could crash applications that use freetype2 to render the fonts. CVE-2010-3814 / CVE-2010-3855 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself i...
Mac OS X Multiple Vulnerabilities (Security Update 2011-001)
The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2011-001 applied. This security update contains fixes for the following products : - Apache - bzip2 - ClamAV - ImageIO - Kerberos - Libinfo - libxml - Mailman - PHP - QuickLook - Ruby - X11 C Tenable Network...
[SECURITY] [DSA 2155-1] freetype security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2155-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 30, 2011 http://www.debian.org/security/faq -...
Fedora Update for freetype FEDORA-2010-17742
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2010-3855
CVE-2010-3855 is a vulnerability in the FreeType font engine (freetype) that occurs due to a buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c on FreeType 2.4.3 and earlier. The flaw allows remote attackers to crash the application or potentially execute arbitrary code...
CentOS Update for freetype CESA-2010:0889 centos4 i386
Check for the Version of freetype OpenVAS Vulnerability Test CentOS Update for freetype CESA-2010:0889 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Fedora Update for freetype FEDORA-2010-17728
Check for the Version of freetype OpenVAS Vulnerability Test Fedora Update for freetype FEDORA-2010-17728 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for freetype FEDORA-2010-17728
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for freetype FEDORA-2010-17755
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 13 : freetype-2.3.11-7.fc13 (2010-17728)
Mon Nov 15 2010 Marek Kasik 2.3.11-7 - Add freetype-2.3.11-CVE-2010-3855.patch Protect against invalid runcnt' values. - Resolves: 651764 - Mon Oct 4 2010 Marek Kasik 2.3.11-6 - Add freetype-2.3.11-CVE-2010-2805.patch Fix comparison. - Add freetype-2.3.11-CVE-2010-2806.patch Protect against...