PT-2022-22521 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue was discovered in OTFCC, which can be exploited via the /release-x64/otfccdump+0x6b558f endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the...

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files.OTFCC 0.10.4 and earlier versions have a buffer overflow vulnerability that stems from /release-x64/otfccdump 0x6b0d63 a boundary error when processing untrusted input, which can be exploite...

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files.OTFCC 0.10.4 and earlier versions contain a buffer overflow vulnerability that stems from /release-x64/otfccdump 0x6b5567 boundary error when processing untrusted input, which can be exploit...

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files.OTFCC 0.10.4 and earlier versions have a buffer overflow vulnerability that originates in /release-x64/otfccdump 0x6c08a6 with a boundary error when processing untrusted input, which can be...

USN-5657-1: Graphite2 vulnerability

It was discovered that Graphite2 mishandled specially crafted files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact...

Create Block Theme < 1.2.2 - Unauthenticated Arbitrary File Upload

The plugin does not have authorisation and CSRF checks, as well as does not validate the file to be uploaded, which could allow unauthenticated attackers to upload arbitrary files to the server As unauthenticated user, open The file will be uploaded at...

Horner Automation Cscape 缓冲区错误漏洞

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A buffer error vulnerability exists in Horner Automation Cscape 9.90 SP 7 and prior versions, which arises from failure to properly validate user-supplied data, and allows...

Horner Automation Cscape 缓冲区错误漏洞

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A buffer error vulnerability exists in Horner Automation Cscape 9.90 SP 6 and prior versions, which arises from failure to properly validate user-supplied data. If a user...

PT-2022-6682 · Horner Automation · Cscape

Name of the Vulnerable Software and Affected Versions: Horner Automation's Cscape versions 9.90 SP7 and prior Description: The issue is related to improper validation of user-supplied data, which can lead to a buffer overflow in memory. This can be exploited if a user opens a maliciously formed F...

Horner Automation Cscape 缓冲区错误漏洞

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A buffer error vulnerability exists in Horner Automation Cscape 9.90 SP 7 and prior versions, which arises from failure to properly validate user-supplied data. If a user...

September 30, 2022—KB5017389 (OS Build 22621.608) Preview

None None...

Caryll OTFCC otfccdump+0x6b559f buffer overflow vulnerability

Caryll OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. Caryll OTFCC suffers from a buffer vulnerability that originates from a boundary error in /release-x64/otfccdump+0x6b559f when processing untrusted input. An attacker could exploit th...

Caryll OTFCC otfccdump+0x6adb1e buffer overflow vulnerability

Caryll OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. Caryll OTFCC suffers from a buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x6adb1e when handling untrusted input. An attacker could...

Caryll OTFCC otfccdump+0x6b064d buffer overflow vulnerability

Caryll OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. Caryll OTFCC suffers from a buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x6b064d when handling untrusted input. An attacker could...

GHSA-6X28-7H8C-CHX4 Dompdf allows remote file inclusion because URI validation failure does not halt font registration

registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule...

OTFCC has unspecified vulnerabilities

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files.OTFCC has a security vulnerability that stems from a segmentation violation located at its /lib/x8664-linux-gnu/libc.so.6 0xbb384. No detailed vulnerability details are currently available...

OTFCC Buffer Overflow Vulnerability (CNVD-2023-11795)

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC is vulnerable to a buffer overflow vulnerability that originates via /release-x64/otfccdump 0x6e20a0 containing a heap buffer overflow. No detailed vulnerability details are currently...

OTFCC has an unspecified vulnerability (CNVD-2023-11793)

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC has a security vulnerability that stems from a segmentation violation located at its /multiarch/memmove-vec-unaligned-erms.S. No detailed vulnerability details are currently available...

OTFCC has an unspecified vulnerability (CNVD-2023-11791)

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC has a security vulnerability that stems from a global buffer overflow located at its /release-x64/otfccdump 0x718693. No detailed vulnerability details are currently available...

OTFCC has an unspecified vulnerability (CNVD-2023-11794)

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC has a security vulnerability that stems from a segmentation violation located at its /release-x64/otfccdump 0x6b6a8f. No detailed vulnerability details are currently available...