Lucene search
K

739 matches found

RedHat Linux
RedHat Linux
added 2014/01/27 7:54 p.m.4 views

ICU: Layout Engine LookupProcessor insufficient input checks (JDK 2D, 8025034)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the Januar...

10CVSS6.8AI score0.08383EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2014/01/15 7:17 p.m.1 views

ICU: Layout Engine LookupProcessor insufficient input checks (JDK 2D, 8025034)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the Januar...

10CVSS6.8AI score0.08383EPSS
Exploits0References5
Prion
Prion
added 2014/01/15 4:8 p.m.21 views

Input validation

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the Januar...

10CVSS7.4AI score0.08383EPSS
Exploits0References31Affected Software3
CVE
CVE
added 2014/01/15 1:33 a.m.107 views

CVE-2013-5907

CVE-2013-5907 is an Oracle Java SE vulnerability affecting multiple Java runtimes (5.0u55, 6u65, 7u45; JRockit R27.7.7/R28.2.9; Java SE Embedded 7u45; OpenJDK 7). The issue is described as an unspecified vulnerability related to the 2D component, with the root cause reportedly linked by third‑par...

10CVSS6AI score0.08383EPSS
Exploits0References31Affected Software2
OSV
OSV
added 2014/01/09 6:55 p.m.2 views

CVE-2013-6462

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long string in a character name in a BDF font file...

8.1AI score
Exploits0References17
Prion
Prion
added 2014/01/09 6:55 p.m.15 views

Stack overflow

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long string in a character name in a BDF font file...

9.3CVSS8.7AI score0.10254EPSS
Exploits1References16Affected Software1
Cvelist
Cvelist
added 2014/01/09 3:0 p.m.16 views

CVE-2013-6462

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long string in a character name in a BDF font file...

7.9AI score0.10254EPSS
Exploits1References16
Debian CVE
Debian CVE
added 2014/01/09 3:0 p.m.19 views

CVE-2013-6462

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long string in a character name in a BDF font file...

9.3CVSS8.1AI score0.10254EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2014/01/07 12:0 a.m.21 views

CVE-2013-6462

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long string in a character name in a BDF font file...

9.3CVSS7.6AI score0.10254EPSS
Exploits1References2
Prion
Prion
added 2012/12/12 12:55 a.m.21 views

Design/Logic Flaw

The OpenType Font OTF driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to execute arbitrary cod...

9.3CVSS7.9AI score0.20766EPSS
Exploits1References3Affected Software4
OpenVAS
OpenVAS
added 2012/12/12 12:0 a.m.29 views

Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2783534)

This host is missing a critical security update according to Microsoft Bulletin MS12-078. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

10CVSS5AI score0.24213EPSS
Exploits2References5
Positive Technologies
Positive Technologies
added 2012/12/11 12:0 a.m.5 views

PT-2012-4098 · Microsoft · Windows Xp +8

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Microsoft...

9.3CVSS7.1AI score0.20766EPSS
Exploits1References6
OpenVAS
OpenVAS
added 2012/11/14 12:0 a.m.25 views

Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2761226)

This host is missing a critical security update according to Microsoft Bulletin MS12-075. OpenVAS Vulnerability Test $Id: secpodms12-075.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities 2761226 Authors: Rachana Shetty Copyright:...

10CVSS0.8AI score0.21689EPSS
Exploits2References3
OpenVAS
OpenVAS
added 2012/11/14 12:0 a.m.23 views

Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2761226)

This host is missing a critical security update according to Microsoft Bulletin MS12-075. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

10CVSS5AI score0.21689EPSS
Exploits2References5
Debian CVE
Debian CVE
added 2012/09/26 10:0 a.m.31 views

CVE-2012-2897

Removed by vendor...

10CVSS7.5AI score0.21689EPSS
Exploits1
OpenVAS
OpenVAS
added 2012/09/06 12:0 a.m.42 views

Ubuntu: Security Advisory (USN-1505-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.1AI score0.93688EPSS
Exploits9References5
Tenable Nessus
Tenable Nessus
added 2012/08/24 12:0 a.m.40 views

CentOS 5 : tetex (CESA-2012:1201)

Updated tetex packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

7.6CVSS7.3AI score0.1427EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.29 views

Scientific Linux Security Update : freetype on SL3.x, SL4.x, SL5.x i386/x86_64

Multiple flaws were discovered in FreeType's Printer Font Binary PFB and TrueType Font TTF font-file format parsers. If a user loaded a carefully crafted font-file with a program linked against FreeType, it could cause the application to crash, or possibly execute arbitrary code. CVE-2008-1806,...

7.5CVSS6.7AI score0.04217EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.24 views

Scientific Linux Security Update : evince on SL6.x i386/x86_64

An array index error was found in the DeVice Independent DVI renderer's PK and VF font file parsers. A DVI file that references a specially crafted font file could, when opened, cause Evince to crash or, potentially, execute arbitrary code with the privileges of the user running Evince...

7.6CVSS6.2AI score0.1427EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2012/07/30 12:0 a.m.25 views

CentOS Update for ghostscript CESA-2012:0095 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

9.3CVSS5.2AI score0.06755EPSS
Exploits1References2
Rows per page
Query Builder