9361 matches found
USN-6062-1 freetype vulnerability
It was discovered that FreeType incorrectly handled certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash, or possibly execute arbitrary code...
USN-6062-1: FreeType vulnerability
It was discovered that FreeType incorrectly handled certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash, or possibly execute arbitrary code...
MAL-2023-453 Malicious code in font-forno (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71a5b24a13fdcf033190873535da22c0b00d1200f4ea936fbaa8a0883a1b6ce3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in font-forno (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71a5b24a13fdcf033190873535da22c0b00d1200f4ea936fbaa8a0883a1b6ce3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for Cross-site Scripting in Dompdf_Project Dompdf
CVE-2022-28368-handler This repository contains a python scrip...
Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2023-1636)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OESA-2023-1246 freetype security update
FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output glyph images of most vector and bitmap font formats Security Fixes: An integer overflow vulnerability was discovered in Freetype in tthvadvanceadjust function...
Denial Of Service (DoS)
firefox is vulnerable to Denial Of Service DoS. The vulnerability exists due to the multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code...
Exploit for Integer Overflow or Wraparound in Microsoft
CVE-2023-21716...
Better Font Awesome Plugin for WordPress < 2.0.4 Cross-Site Scripting
The WordPress Better Font Awesome Plugin installed on the remote host is affected by a cross-site scripting vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
编号撤回
FreeType is an open source font rendering library written in C. This CVE number has been withdrawn...
Adobe Photoshop Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2023-29537
Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...
UBUNTU-CVE-2023-29537
Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...
PT-2023-35761 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as pdfi read cff font, pdfi load font buffer, and pdfi load...
Security Vulnerabilities fixed in Firefox 112, Firefox for Android 112, Focus for Android 112 — Mozilla
An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash.This bug only affects Firefox for macOS. Other operating systems are unaffected. A local attacker can trick the Mozilla Maintenance Service into applying...
CVE-2023-27650
An issue found in APUS Group Launcher v.3.10.73 and v.3.10.88 allows a remote attacker to execute arbitrary code via the FONTFILE parameter...
APUS Launcher 安全漏洞
APUS Launcher is an application from Kirin Hesheng Technology APUS, a company based in Beijing, China. Automatically sorts your apps by category on the home screen to quickly and easily find the apps you want. A security vulnerability exists in APUS Launcher versions v.3.10.73 and v.3.10.88, whic...
PT-2023-21284 · Apus · Apus Group Launcher
Name of the Vulnerable Software and Affected Versions: APUS Group Launcher versions 3.10.73 through 3.10.88 Description: An issue in the APUS Group Launcher allows a remote attacker to execute arbitrary code via the FONT FILE parameter. Recommendations: For versions 3.10.73 and 3.10.88, consider...
