CVE-2015-6103

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted embedded...

Microsoft released MS15-0 7 8 notice: the font drive containing the vulnerability affects all versions-bug warning-the black bar safety net

Microsoft today released MS15-0 7 8 Number of security announcements, announcement said Microsoft font driver contains a vulnerability, the vulnerability is remote code execution. If a user opens a specially crafted file, or unsafe web pages which contain embedded OpenType fonts can be remote cod...

Adobe Reader Memory Corruption (APSB14-28: CVE-2014-8460) - ver 2

Adobe Reader is vulnerable to a buffer overflow while parsing the font data. The access violation occurs because the number of subroutines for the embedded font is larger than the size of the subroutine array which leads to a crash...

CVE-2014-2778

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted embedded font in a 1 .doc or 2 .docx document, aka "Embedded Font Vulnerability."...

Memory corruption

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted embedded font in a 1 .doc or 2 .docx document, aka "Embedded Font Vulnerability."...

CVE-2014-2778

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted embedded font in a 1 .doc or 2 .docx document, aka "Embedded Font Vulnerability."...

CVE-2014-2778

CVE-2014-2778 affects Word 2007 SP3 and Office Compatibility Pack SP3. It allows remote attackers to execute arbitrary code or cause a denial of service through a crafted embedded font in a .doc/.docx document due to memory corruption. Affected products include Word 2007 SP3 and Office Compatibil...

KLA10012 Vulnerability in Microsoft Word 2007 & Office Compatibility Pack

An unspecified vulnerability was found in the Word 2007 and Office Compatibility Pack. By exploiting this vulnerability malicious users can execute arbitrary code or cause a denial of service. This vulnerability can be exploited from the network at point related to an unknown application via a...

CVE-2011-3449

Use-after-free vulnerability in CoreText in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted embedded font in a document...

Design/Logic Flaw

Use-after-free vulnerability in CoreText in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted embedded font in a document...

CVE-2011-3449

Use-after-free vulnerability in CoreText in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted embedded font in a document...

Apple Mac OS X CoreText embedded font vulnerability

Overview Apple Mac OS X CoreText contains a use-after-free vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Apple Mac OS X CoreText is a text layout and font processing engine that is used to handle embedded fonts.CoreTe...

CVE-2011-0177

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font...

Memory corruption

CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a document that contains a crafted embedded font...

Buffer overflow

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font...

CVE-2011-0177

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font...

CVE-2011-0179

CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a document that contains a crafted embedded font...

CVE-2010-3814

Heap-based buffer overflow in the InsSHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document wit...

DEBIAN-CVE-2010-3814

Heap-based buffer overflow in the InsSHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document wit...

Heap overflow

Heap-based buffer overflow in the InsSHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document wit...