RHEL 4 / 5 : freetype (RHSA-2010:0578)

Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

RHEL 3 : freetype (RHSA-2010:0577)

Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

RedHat Update for freetype RHSA-2010:0578-01

Check for the Version of freetype OpenVAS Vulnerability Test RedHat Update for freetype RHSA-2010:0578-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Microsoft Windows Embedded OpenType Font Engine LZCOMP Overflow (MS10-001; CVE-2010-0018)

Embedded OpenType EOT fonts are a compact form of fonts designed for use on web pages. A remote attacker can exploit these vulnerabilities via a specially crafted EOT file. Successful exploitation may allow execution of arbitrary code on a vulnerable system. An integer overflow vulnerability has...

CVE-2010-0018

Integer overflow in the Embedded OpenType EOT Font Engine t2embed.dll in Microsoft Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code via...

Integer overflow

Integer overflow in the Embedded OpenType EOT Font Engine t2embed.dll in Microsoft Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code via...

CVE-2010-0018

CVE-2010-0018 is an integer overflow in the Windows Embedded OpenType (EOT) Font Engine (t2embed.dll) that could allow remote code execution via specially crafted EOT fonts. The issue occurs when decompressing EOT fonts and affects multiple Windows platforms (including Windows 2000 SP4, XP SP2/SP...

Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities (972270)

This host is missing a critical security update according to Microsoft Bulletin MS10-001. OpenVAS Vulnerability Test $Id: secpodms10-001.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities 972270 Authors: Antu Sanadi Updated By:...

PT-2010-1843 · Microsoft · Windows Server 2003 +7

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2 Description: The issue is related to an intege...

Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities (972270)

This host is missing a critical security update according to Microsoft Bulletin MS10-001. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS Patches Critical Flaw in EOT Font Engine

The first Microsoft patch for 2010 is out, providing cover for a solitary vulnerability in the way Windows handles EOT Embedded OpenType fonts. The update is rated “critical” but Microsoft says there is a low likelihood of exploitation on its newer operating systems. The vulnerability, which was...

Microsoft Windows Embedded OpenType Font Engine LZCOMP Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the Embedded OpenType font engine. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Successful exploits may aid in the compromise of affected...

CentOS 5 : freetype (CESA-2009:1061)

Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine that can open and manage font...

Microsoft Windows Server 2000 2008 - Embedded OpenType Font Engine Remote Code Execution (MS09-065) (Metasploit)

Microsoft Windows Server 2000 2008 - Embedded OpenType Font Engine Remote Code Execution MS09-065 Metasploit $Id: ms09065eotinteger.rb 7470 2009-11-11 23:48:53Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the...

Microsoft Windows Server 2003 OpenType Font Engine DoS Vulnerability

This host is running Windows Server 2003 operating system and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbmswin2k3dosvulnsep09.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Windows Server 2003 OpenType Font Engine DoS Vulnerability Authors: Antu Sanadi Copyrigh...

Microsoft Windows Server 2003 OpenType Font Engine DoS Vulnerability

Windows Server 2003 operating system is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2009-3020

win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service system crash by referencing a crafted .eot file in the src descriptor of an @font-face Cascading Style Sheets CSS rule in an HTML document, possibly related to the Embedded OpenType EOT Font Engin...

CVE-2009-3020

CVE-2009-3020 refers to a denial-of-service vulnerability in Windows Server 2003 SP2 via win32k.sys/Embedded OpenType Font Engine. The issue arises when a crafted .eot font is referenced in the src descriptor of an @font-face CSS rule in an HTML document, potentially allowing a remote attacker to...

Microsoft Windows Embedded OpenType Font Engine Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that may affect the Embedded OpenType font engine. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will completely compromise affected computers...

iDefense Security Advisory 07.15.09: Microsoft Embedded OpenType Font Engine (T2EMBED.DLL) Heap Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 07.14.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 14, 2009 I. BACKGROUND Microsoft Embedded OpenType Font Engine T2EMBED.DLL allows an application to load a custom OpenType font. It is often used by Interne...