CVE-2009-0232

Integer overflow in the Embedded OpenType EOT Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table, aka "Embedded OpenType Font Integer Overflow...

CVE-2009-0231

The Embedded OpenType EOT Font Engine T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers an integer truncation...

CVE-2009-0232

Integer overflow in the Embedded OpenType EOT Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table, aka "Embedded OpenType Font Integer Overflow...

Heap overflow

The Embedded OpenType EOT Font Engine T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers an integer truncation...

Integer overflow

Integer overflow in the Embedded OpenType EOT Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table, aka "Embedded OpenType Font Integer Overflow...

CVE-2009-0232

CVE-2009-0232: A remote-code-execution vulnerability in the Embedded OpenType (EOT) Font Engine. An integer overflow occurs while parsing EOT name tables, affecting Windows 2000 SP4; XP SP2/SP3; Server 2003 SP2; Vista SP1/SP2; and Server 2008 Gold/SP2. An attacker could exploit this via a crafted...

CVE-2009-0231

The Embedded OpenType EOT Font Engine T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers an integer truncation...

PT-2009-2907 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue is related to an integer overflow in the Embedded OpenType EOT Font Engine, allowing remote attackers to execute arbitrary code via a crafted name table. A remote co...

Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities (961371))

This host is missing a critical security update according to Microsoft Bulletin MS09-029. OpenVAS Vulnerability Test $Id: secpodms09-029.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities 961371 Authors: Antu Sanadi Updated By:...

Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities (961371)

This host is missing a critical security update according to Microsoft Bulletin MS09-029. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Security Bulletin MS09-029 - Critical Vulnerabilities in the Embedded OpenType Font Engine Could Allow Remote Code Execution (961371)

Microsoft Security Bulletin MS09-029 - Critical Vulnerabilities in the Embedded OpenType Font Engine Could Allow Remote Code Execution 961371 Published: July 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in a...

MS09-029: Vulnerabilities in the Embedded OpenType Font Engine Could Allow Remote Code Execution (961371)

The remote Windows host contains a version of the Embedded OpenType EOT Font Engine that is affected by multiple buffer overflow vulnerabilities due to the way the EOT font technology parses name tables in specially crafted embedded fonts. If an attacker can trick a user on the affected system in...

RedHat Security Advisory RHSA-2009:0329

The remote host is missing updates to FreeType announced in advisory RHSA-2009:0329. Tavis Ormandy of the Google Security Team discovered several integer overflow flaws in the FreeType 2 font engine. If a user loaded a carefully-crafted font file with an application linked against FreeType 2, it...

[ GLSA 200905-05 ] FreeType: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200905-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

RedHat Security Advisory RHSA-2009:1062

The remote host is missing updates to FreeType announced in advisory RHSA-2009:1062. Tavis Ormandy of the Google Security Team discovered several integer overflow flaws in the FreeType 2 font engine. If a user loaded a carefully-crafted font file with an application linked against FreeType 2, it...

RedHat Security Advisory RHSA-2009:0329

The remote host is missing updates to FreeType announced in advisory RHSA-2009:0329. Tavis Ormandy of the Google Security Team discovered several integer overflow flaws in the FreeType 2 font engine. If a user loaded a carefully-crafted font file with an application linked against FreeType 2, it...

RedHat Security Advisory RHSA-2009:1061

The remote host is missing updates to FreeType announced in advisory RHSA-2009:1061. Tavis Ormandy of the Google Security Team discovered several integer overflow flaws in the FreeType 2 font engine. If a user loaded a carefully-crafted font file with an application linked against FreeType 2, it...

FreeType: Multiple vulnerabilities

Background FreeType is a high-quality and portable font engine. Description Tavis Ormandy reported multiple integer overflows in the cffcharsetcomputecids function in cff/cffload.c, sfnt/tccmap.c and the ftsmoothrendergeneric function in smooth/ftsmooth.c, possibly leading to heap or stack-based...

RHEL 2.1 : freetype (RHSA-2009:1062)

Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine that can open and manage font...

CentOS 3 / 4 : freetype (CESA-2009:0329)

Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine that can open and manage...