Lucene search
K

45 matches found

CNNVD
CNNVD
added 2026/04/28 12:0 a.m.6 views

Artifex Software MuPDF 缓冲区错误漏洞

Artifex Software MuPDF is a free and lightweight PDF reader developed by Artifex Software in the United States. Versions of Artifex Software MuPDF 1.28.0 and earlier contain a buffer error vulnerability. This vulnerability stems from the fzsubsetcffforgids function in the CFF Index Handler...

6.1CVSS6AI score0.00018EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-12082

Malware in sbrugna...

9.3CVSS8.6AI score0.02251EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2010-3986

Malware in sbrugna...

6.8CVSS6.2AI score0.01314EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 3:57 a.m.5 views

CVE-2023-35177

Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser...

8.8CVSS7.3AI score0.00305EPSS
Exploits0
Prion
Prion
added 2023/06/30 4:15 p.m.20 views

Stack overflow

Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser...

5.8CVSS8.8AI score0.00305EPSS
Exploits0References1Affected Software38
Cvelist
Cvelist
added 2023/06/30 3:51 p.m.11 views

CVE-2023-35177

Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser...

9.1AI score0.00305EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/06/30 3:51 p.m.6 views

CVE-2023-35177

Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser...

7.3AI score0.00305EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/06/30 12:0 a.m.1 views

PT-2023-25187 · Hewlett Packard · Hp Laserjet Pro

Name of the Vulnerable Software and Affected Versions: HP LaserJet Pro print products affected versions not specified Description: The issue is related to a stack-based buffer overflow in the compact font format parser. This could potentially allow for remote code execution. Recommendations: At t...

8.8CVSS8.9AI score0.00305EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:59 a.m.2 views

SUSE CVE-2010-1797

Multiple stack-based buffer overflows in the cffdecoderparsecharstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute...

9.3CVSS7.8AI score0.5972EPSS
Exploits7References8
Veracode
Veracode
added 2020/04/10 12:47 a.m.33 views

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. Two stack overflow flaws were found in the way the FreeType font engineprocessed certain Compact Font Format CFF character strings opcodes. If a user loaded a specially-crafted font file with an application linked against FreeType, it could caus...

9.3CVSS3.3AI score0.5972EPSS
Exploits7References24Affected Software1
NVD
NVD
added 2017/01/11 4:59 a.m.13 views

CVE-2017-2941

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution...

9.3CVSS7.9AI score0.02251EPSS
Exploits0References4
OSV
OSV
added 2017/01/11 4:59 a.m.0 views

CVE-2017-2941

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution...

7.8CVSS6AI score0.02251EPSS
Exploits0References4
AlpineLinux
AlpineLinux
added 2017/01/11 4:40 a.m.1 views

CVE-2017-2941

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution...

9.3CVSS8AI score0.02251EPSS
Exploits0References4
Cvelist
Cvelist
added 2017/01/11 4:40 a.m.19 views

CVE-2017-2941

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution...

9AI score0.02251EPSS
Exploits0References4
Microsoft KB
Microsoft KB
added 2017/01/07 12:0 a.m.17 views

MS11-007: Vulnerability in the OpenType Compact Font Format CFF driver could allow remote code execution

MS11-007: Vulnerability in the OpenType Compact Font Format CFF driver could allow remote code execution Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 SP2. For more...

7.1AI score
Exploits0
Microsoft KB
Microsoft KB
added 2017/01/07 12:0 a.m.28 views

MS11-032: Vulnerability in the OpenType Compact Font Format (CFF) driver could allow remote code execution: April 12, 2011

MS11-032: Vulnerability in the OpenType Compact Font Format CFF driver could allow remote code execution: April 12, 2011 Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack...

7.1AI score
Exploits0
OSV
OSV
added 2015/02/08 12:0 a.m.0 views

UBUNTU-CVE-2014-9659

cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow via a crafted OpenType font. NOTE: this...

7.5CVSS7.6AI score0.02849EPSS
Exploits2References3
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.37 views

Foxit Reader <= 4.0 pdf Jailbreak Exploit

No description provided by source. import sys,zlib def getFFShellcodesc: ffsc = '' if lensc%4 != 0: sc += 4-lensc%4'\x00' for i in range0,lensc,4: ffsc += '\xff'+sci+3+sci+2+sci+1+sci return ffsc outputHeader = ''' FreeType Compact Font Format CFF Multiple Stack Based Buffer Overflow CVE-2010-179...

9.3CVSS0.5972EPSS
Exploits7
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.42 views

Scientific Linux Security Update : freetype on SL3.x, SL4.x, SL5.x i386/x86_64

Two stack overflow flaws were found in the way the FreeType font engine processed certain Compact Font Format CFF character strings opcodes. If a user loaded a specially crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute...

9.3CVSS5.9AI score0.5972EPSS
Exploits7References2
OpenVAS
OpenVAS
added 2011/08/09 12:0 a.m.24 views

CentOS Update for freetype CESA-2010:0607 centos5 i386

Check for the Version of freetype OpenVAS Vulnerability Test CentOS Update for freetype CESA-2010:0607 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

9.3CVSS0.3AI score0.5972EPSS
Exploits7References2
Rows per page
Query Builder