399 matches found
Microsoft Windows Graphics Memory Corruption Vulnerability (CNVD-2016-02246)
Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in the font library of Microsoft Windows, which arises from a failure of the program to properly handle specially designed embedded fonts. A remote attacker...
Microsoft Lync Remote Code Execution Vulnerability (3148522)
This host is missing a critical security update according to Microsoft Bulletin MS16-039. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Lync Attendee Remote Code Execution Vulnerability (3148522)
This host is missing a critical security update according to Microsoft Bulletin MS16-039. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS16-039: Description of the security update for the .NET Framework 3.5 in Windows Server 2012: April 12, 2016
MS16-039: Description of the security update for the .NET Framework 3.5 in Windows Server 2012: April 12, 2016 View products that this article applies to. Summary This security update resolves vulnerabilities in the Microsoft .NET Framework. The vulnerabilities could allow remote code execution i...
MS16-039: Description of the security update for Windows Graphics Component: April 12, 2016
None None...
Microsoft Teams help & learning
None None...
KLA10788 Multiple vulnerabilities in Microsoft Graphics Component
Multiple serious vulnerabilities have been found in Microsoft Graphics Component as used in multiple Microsoft products. Malicious users can exploit these vulnerabilities to execute arbitrary code or gain privileges. Below is a complete list of vulnerabilities 1. An improper memory objects handli...
MS16-039: Security Update for Microsoft Graphics Component (3148522)
The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple elevation of privilege vulnerabilities exist in the Windows kernel-mode driver due to a failure to properly handle objects in memory. An attacker can exploit these...
Microsoft Windows Graphics Memory Corruption Vulnerability (CNVD-2015-08116)
Microsoft Windows is a series of operating systems released by the American company Microsoft. A memory corruption vulnerability exists in the Windows font library of Microsoft Windows. The vulnerability exists because the program does not properly handle specially designed embedded fonts. A remo...
Microsoft .NET Framework Remote Code Execution Vulnerabilities (3104503)
This host is missing a critical security update according to Microsoft Bulletin MS15-128. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS15-115: Security update for Windows to address remote code execution: November 10, 2015
Resolves vulnerabilities in Windows that could allow remote code execution if an attacker convinces a user to open a specially crafted document or to go to an untrusted webpage that contains embedded fonts.SummaryThis security update resolves vulnerabilities in Windows. The most severe of the...
Microsoft Word memory corruption
Memory corruption on embedded fonts parsing...
Microsoft Office Compatibility Pack Remote Code Execution Vulnerability (2969261)
This host is missing an important security update according to Microsoft Bulletin MS14-034. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Office Word Remote Code Execution Vulnerability (2969261)
This host is missing an important security update according to Microsoft Bulletin MS14-034. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Embedded OpenType EOT Font Integer Overflow (MS10-076; CVE-2010-1883)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an integer overflow in the Microsoft Windows EOT component, when parsing certain tables within specially crafted files and content containing embedded fonts. A remote attacker may exploit thi...
Apple Fixes 13 Bugs in Major OS X Patch Release
Apple released a patch Tuesday that fixes more than a dozen bugs, including a critical remote code-execution flaw in Apple Type Services. The patch release also includes a fix for a flaw in CFNetwork that enabled an attacker to intercept user credentials and other sensitive data silently on a...
DEBIAN-CVE-2010-1797
Multiple stack-based buffer overflows in the cffdecoderparsecharstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute...
Stack overflow
Multiple stack-based buffer overflows in the cffdecoderparsecharstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute...
CVE-2010-1797
Multiple stack-based buffer overflows in the cffdecoderparsecharstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute...
CVE-2010-1797
Multiple stack-based buffer overflows in the cffdecoderparsecharstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute...