Twitter Feed <= 0.3.1 - XSS

The Peadig's Twitter Feed: Embedded Timeline WordPress Plugin WordPress plugin was affected by a XSS security vulnerability...

RDM Embedded Lock Manager 9.x - lm_tcp Service Buffer Overflow

RDM Embedded Lock Manager 9.x - lmtcp Service Buffer Overflow source: https://www.securityfocus.com/bid/45245/info RDM Embedded is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. The issue affects the 'lmtcp' service. Successful...

RDM Embedded Lock Manager < 9.x - 'lm_tcp' Service Buffer Overflow

source: https://www.securityfocus.com/bid/45245/info RDM Embedded is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. The issue affects the 'lmtcp' service. Successful exploits may allow an attacker to execute arbitrary code in t...

CVE-2010-3814

Heap-based buffer overflow in the InsSHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document wit...

DEBIAN-CVE-2010-3814

Heap-based buffer overflow in the InsSHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document wit...

Heap overflow

Heap-based buffer overflow in the InsSHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document wit...

Tomcat remote denial of service vulnerability analysis(CVE-2 0 1 0-2 2 2 7)-vulnerability warning-the black bar safety net

The present article is an analysis of the POC process, the pressure of the N months, and now before the issue. Using the analysis of POC, Tomcat in addition to the latest versionsee the specific website, and JBOSS in addition to the latest version, can fight, POC see the article. JBOSS official h...

WordPress Embedded Video Plugin <= 4.1 - XSS

Because of this vulnerability in lembedded-video.php, the attackers can inject arbitrary web script or HTML via the "content" parameter to wp-admin/post.php. Solution Update the plugin...

CVE-2010-1831

Buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code via a long name of an embedded font in a document...

CVE-2010-1833

Apple Type Services ATS in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted embedded font in a document...

CVE-2010-1832

Stack-based buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code via a crafted embedded font in a document...

Memory corruption

Apple Type Services ATS in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted embedded font in a document...

Stack overflow

Stack-based buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code via a crafted embedded font in a document...

Buffer overflow

Buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code via a long name of an embedded font in a document...

CVE-2010-1832

Stack-based buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code via a crafted embedded font in a document...

CVE-2010-3814

Heap-based buffer overflow in the InsSHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document wit...

CVE-2010-1883

Integer overflow in the Embedded OpenType EOT Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted table in an embedded font, aka...

CVE-2010-1883

CVE-2010-1883 describes an integer overflow in the Microsoft Windows Embedded OpenType (EOT) Font Engine that could allow remote code execution. The vulnerability occurs when parsing certain tables in embedded fonts (notably during handling of the hdmx records) and affects multiple Windows produc...

CVE-2010-1883

Integer overflow in the Embedded OpenType EOT Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted table in an embedded font, aka...

Microsoft Windows OpenType Font (OTF) Format Driver CVE-2010-2741 Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Attackers may exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts...