9374 matches found
CVE-2021-34533
CVE-2021-34533 is a Windows Graphics Component Font Parsing Remote Code Execution Vulnerability. Affected software is the Windows Graphics Component; the issue arises from font parsing logic, enabling code execution on the target system. The CVSS data indicates a HIGH impact with potential local ...
openSUSE: Security Advisory for python-CairoSVG, (openSUSE-SU-2021:1134-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
UBUNTU-CVE-2020-21684
A global buffer overflow in the putfont in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into pict2e format...
Buffer overflow
A global buffer overflow in the putfont in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into pict2e format...
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
...
PT-2021-6724 · Fig2Dev · Fig2Dev
Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.7b Description: The issue is related to a global buffer overflow in the put font function of the genpict2e.c component in the fig2dev utility. This occurs when converting a xfig file into pict2e format without proper input...
Xfig fig2dev 缓冲区错误漏洞
fig2dev is used to convert .fig files to various graphics languages and formats. A global buffer overflow vulnerability exists in putfont in genpict2e.c in fig2dev version 3.2.7b. An attacker could exploit this vulnerability to cause a denial of service by converting xfig files to pict2e format...
PT-2021-3837 · Microsoft · Windows Graphics +1
Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Graphics Component Font Parsing. It allows remote attackers to execute arbitrary code by sendi...
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Description The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues Edit WPScanTeam: - The original report mentioned the issue...
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Description The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues Edit WPScanTeam: - The original report mentioned the issue...
OESA-2021-1303 libass security update
libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. It is mostly compatible with VSFilter. Security Fixes: libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the...
Apple macOS libType1Scaler PFB Font Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the libType1Scaler library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...
Apple macOS libFontParser TTF Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Apple macOS Big Sur Buffer Overflow Vulnerability (CNVD-2021-102842)
Apple macOS Big Sur is a mobile application app from Apple Inc. Apple macOS Big Sur is vulnerable to a buffer overflow vulnerability that could be exploited by remote attackers to create a specially crafted font file and trick victims into opening it, triggering an out-of-bounds read error and...
Apple macOS Big Sur Buffer Overflow Vulnerability (CNVD-2021-102843)
Apple macOS Big Sur is a mobile application app from Apple, Inc. Apple macOS Big Sur is vulnerable to a buffer overflow vulnerability that could be exploited by remote attackers to create a specially crafted font file and trick victims into opening it, triggering an out-of-bounds read error and...
Apple macOS 缓冲区错误漏洞
Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in Apple macOS, which can be exploited by a remote attacker to create a specially crafted font file, trick the victim into opening it, trigger a stack-based buffer overflow...
Apple macOS 缓冲区错误漏洞
Apple macOS is a suite of specialized operating systems from the U.S.-based Apple Inc. developed specifically for Mac computers. macOS suffers from a buffer error vulnerability that exists due to a boundary condition in CoreText. A remote attacker could exploit the vulnerability could create a...
About the security content of iOS 14.7 and iPadOS 14.7
About the security content of iOS 14.7 and iPadOS 14.7 This document describes the security content of iOS 14.7 and iPadOS 14.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
Apple macOS Big Sur 信息泄露漏洞
Apple macOS Big Sur is a mobile application app from Apple Inc. Apple macOS Big Sur is vulnerable to a buffer overflow vulnerability that could be exploited by remote attackers to create a specially crafted font file and trick victims into opening it, triggering an out-of-bounds read error and...
Apple macOS 缓冲区错误漏洞
Apple macOS Big Sur is a mobile application app from Apple, Inc. Apple macOS Big Sur is vulnerable to a buffer overflow vulnerability that could be exploited by remote attackers to create a specially crafted font file and trick victims into opening it, triggering an out-of-bounds read error and...