Lucene search
+L

55 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/27 12:00 a.m.•4 views

CVE-2022-3379: Out-of-bounds Write

Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by writing outside the memory buffer...

7.8CVSS7.7AI score0.00243EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/27 12:00 a.m.•3 views

CVE-2022-3377: Access of Uninitialized Pointer

Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory...

7.8CVSS7.7AI score0.00249EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/27 12:00 a.m.•2 views

CVE-2022-3378: Access of Uninitialized Pointer

Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory...

7.8CVSS7.7AI score0.00249EPSS
SaveExploits0References3
OSV
OSV
•added 2022/05/18 11:04 a.m.•12 views

OESA-2022-1655 freetype security update

FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output glyph images of most vector and bitmap font formats Security Fixes: FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap...

9.8CVSS7.4AI score0.03326EPSS
SaveExploits2References4
Microsoft CVE
Microsoft CVE
•added 2022/05/06 7:00 a.m.•9 views

FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.

...

7.5CVSS7.2AI score0.02829EPSS
SaveExploits0
attackerkb
attackerkb
•added 2022/04/22 2:15 p.m.•11 views

CVE-2022-27405

FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNTSizeRequest...

7.5CVSS7.1AI score0.02829EPSS
SaveExploits0References14
OSV
OSV
•added 2022/04/22 2:15 p.m.•6 views

DEBIAN-CVE-2022-27405

FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNTSizeRequest...

7.5CVSS7.1AI score0.02829EPSS
SaveExploits0References1
OSV
OSV
•added 2022/04/22 2:15 p.m.•6 views

ALPINE-CVE-2022-27405

FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNTSizeRequest...

7.5CVSS7.1AI score0.02829EPSS
SaveExploits0References1
OSV
OSV
•added 2022/04/22 2:15 p.m.•10 views

UBUNTU-CVE-2022-27405

FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNTSizeRequest...

7.5CVSS7.1AI score0.02829EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/04/22 12:00 a.m.•11 views

FreeType 缓冲区错误漏洞

FreeType is an open source font rendering library written in the C language. A security vulnerability exists in FreeType, which stems from the submission 53dfdcd8198d2b3201a23c4bad9190519ba918db was found to contain a segmentation violation via the FNTSizeRequest function...

7.5CVSS7.1AI score0.02829EPSS
SaveExploits0References19
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•12 views

PT-2022-1386 · Freetype +9 · Freetype +9

Name of the Vulnerable Software and Affected Versions: FreeType affected versions not specified Description: The issue is related to a segmentation violation via the FNT Size Request function, which can be exploited by a remote attacker to cause a denial of service. Additionally, there is a...

9.8CVSS7.2AI score0.03326EPSS
SaveExploits2References94
Veracode
Veracode
•added 2020/04/10 1:09 a.m.•30 views

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. The vulnerability exists as multiple flaws were found in the way FreeType handled TrueType Font TTF, Glyph Bitmap Distribution Format BDF, Windows .fnt and .fon, and PostScript Type 1 fonts. If a specially-crafted font file was loaded by an...

9.3CVSS1.9AI score0.04583EPSS
SaveExploits0References28Affected Software1
Tenable Nessus
Tenable Nessus
•added 2015/03/30 12:00 a.m.•24 views

Mandriva Linux Security Advisory : xlockmore (MDVSA-2015:118)

Updated xlockmore packages fix security vulnerability : xlockmore before 5.45 contains a security flaw related to a bad value of fnt for pyro2 which could cause an X error. This update backports the fix for version 5.43. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

5.5AI score
SaveExploits0References1
Mageia
Mageia
•added 2014/12/26 5:04 p.m.•23 views

Updated xlockmore packages fix a security vulnerability

Updated xlockmore packages fix security vulnerability xlockmore before 5.45 contains a security flaw related to a bad value of fnt for pyro2 which could cause an X error. This update backports the fix for version 5.43...

3AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2009/06/04 12:00 a.m.•18 views

AIX 610002 : U825561

The remote host is missing AIX PTF U825561 which is related to the security of the package X11.samples.fnt.util You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

5.5AI score
SaveExploits0
Rows per page
Query Builder