[SECURITY] [DSA-2116-1] New freetype packages integer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-2116-1 [email protected] http://www.debian.org/security/ Stefan Fritsch October 4, 2010 http://www.debian.org/security/faq -...

DSA-2116-1 freetype - integer overflow

Bulletin has no description...

Mandriva Linux Security Advisory : freetype2 (MDVSA-2010:149)

A vulnerability has been discovered and corrected in freetype2 : Multiple stack overflow flaws have been reported in the way FreeType font rendering engine processed certain CFF opcodes. An attacker could use these flaws to create a specially crafted font file that, when opened, would cause an...

Mandriva Update for freetype2 MDVSA-2010:149 (freetype2)

Check for the Version of freetype2 OpenVAS Vulnerability Test Mandriva Update for freetype2 MDVSA-2010:149 freetype2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Microsoft Windows OpenType CFF驱动本地权限提升漏洞（MS10-037）

BUGTRAQ ID: 40572 CVE ID: CVE-2010-0819 Windows是微软发布的非常流行的操作系统。 Windows OpenType CFF驱动没有正确地验证用户态传送给内核态的某些数据，如果用户查看了特制CCF字体所渲染的内容，在获得字型轮廓时就会用任意数量的0字节覆盖内核内存，导致内核级权限提升。攻击者必须拥有有效的登录凭据且能够本地登录才可以利用这个漏洞，无法远程或匿名利用。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft...

RHEL 3 / 4 / 5 : pango (RHSA-2010:0140)

Updated pango and evolution28-pango packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pango is a library used for the layout and rendering of...

CentOS Update for evolution28-pango CESA-2010:0140 centos4 i386

Check for the Version of evolution28-pango OpenVAS Vulnerability Test CentOS Update for evolution28-pango CESA-2010:0140 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...

[SECURITY] [DSA-2019-1] New pango1.0 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2019-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 20, 2010 http://www.debian.org/security/faq -...

Moderate: Red Hat Security Advisory: pango security update

Updated pango and evolution28-pango packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pango is a library used for the layout and rendering of...

MS Patches Critical Flaw in EOT Font Engine

The first Microsoft patch for 2010 is out, providing cover for a solitary vulnerability in the way Windows handles EOT Embedded OpenType fonts. The update is rated “critical” but Microsoft says there is a low likelihood of exploitation on its newer operating systems. The vulnerability, which was...

[SECURITY] [DSA 1936-1] New libgd2 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1936-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano November 17, 2009 http://www.debian.org/security/faq -...

Integer overflow

Integer overflow in Apple CoreGraphics, as used in Safari before 4.0.3, Mozilla Firefox before 3.0.12, and Mac OS X 10.4.11 and 10.5.8, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long text run that triggers a heap-based buffer...

CVE-2009-2468

CVE-2009-2468 text describes an integer overflow in Apple CoreGraphics used by Safari/Firefox/macOS, allowing DoS or possible code execution via a long text run during font glyph rendering, related to CVE-2009-1194. Connected documents primarily provide details on CVE-2009-1194 affecting Pango: i...

Heap/integer overflows in font glyph rendering libraries — Mozilla

oCERT security researcher Will Drewry reported a series of heap and integer overflow vulnerabilities which independently affected multiple font glyph rendering libraries. On Linux platforms libpango was susceptible to the vulnerabilities while on OS X CoreGraphics was similarly vulnerable. An...

[SECURITY] Fedora 10 Update: freetype1-1.4-0.8.pre.fc10

The FreeType engine is a free and portable TrueType font rendering engine, developed to provide TrueType support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is no ...

Fedora Update for freetype FEDORA-2007-561

Check for the Version of freetype OpenVAS Vulnerability Test Fedora Update for freetype FEDORA-2007-561 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for freetype FEDORA-2007-0033

Check for the Version of freetype OpenVAS Vulnerability Test Fedora Update for freetype FEDORA-2007-0033 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for freetype FEDORA-2008-5430

Check for the Version of freetype OpenVAS Vulnerability Test Fedora Update for freetype FEDORA-2008-5430 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for freetype FEDORA-2008-5425

Check for the Version of freetype OpenVAS Vulnerability Test Fedora Update for freetype FEDORA-2008-5425 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 8 Update: freetype-2.3.5-4.fc8

The FreeType engine is a free and portable font rendering engine, developed to provide advanced font support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is not a...