PT-2021-18849 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 14.7 Apple macOS versions prior to Big Sur 11.5 Apple watchOS versions prior to 7.6 Apple tvOS versions prior to 14.7 Apple macOS Mojave versions prior to Security Update 2021-005 Apple macOS Catalina versions prio...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in Apple macOS, which can be exploited by a remote attacker to trigger an integer overflow and execute arbitrary code on the target system via a specially crafte...

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in macOS, which can be exploited by a remote attacker to create a specially crafted font file, trick a victim into opening it, trigger a stack-based buffer overflow, and execut...

UBUNTU-CVE-2020-36430

libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data type is used for subtraction...

Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-62471)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A remote code execution vulnerability exists in Font Driver Host in...

About the security content of iOS 14.7 and iPadOS 14.7

About the security content of iOS 14.7 and iPadOS 14.7 This document describes the security content of iOS 14.7 and iPadOS 14.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

CVE-2021-34438

Windows Font Driver Host Remote Code Execution Vulnerability...

CVE-2021-34438

Windows Font Driver Host Remote Code Execution Vulnerability...

Remote code execution

Windows Font Driver Host Remote Code Execution Vulnerability...

CVE-2021-34438

Windows Font Driver Host Remote Code Execution Vulnerability...

CVE-2021-34438 Windows Font Driver Host Remote Code Execution Vulnerability

...

CVE-2021-34438

CVE-2021-34438 is a Windows Font Driver Host remote code execution vulnerability in Microsoft Windows/Windows Server. The CVE entry describes a remote code execution flaw in the Font Driver Host component that can be triggered locally or remotely depending on context, with high/severe impact as r...

CVE-2021-34438 Windows Font Driver Host Remote Code Execution Vulnerability

...

Windows Font Driver Host Remote Code Execution Vulnerability

...

PT-2021-5264 · Microsoft · Windows Font Driver Host +1

Name of the Vulnerable Software and Affected Versions: Windows Font Driver Host affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Font Driver. It allows remote attackers to execute arbitrary code, affecting the system...

Microsoft Graphics Component 代码注入漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A remote code execution vulnerability exists in Font Driver Host in...

Denial Of Service (DoS)

freetype is vulnerable to denial of service. A NULL pointer dereference in the InsGETVARIATION function in ttinterp.c allows an attacker to crash the application via a malicious font file...

The vulnerability of the ReadCAPTIONImage function in the coders/caption.c component of the console image editing tool ImageMagick, which is related to infinite loop execution, allows a hacker to cause a service failure.

The vulnerability of the ReadCAPTIONImage function in the coders/caption.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker who operates remotely to cause a service failure using a specially creat...

CVE-2021-21101 Adobe Illustrator TTF font parsing out-of-bounds write vulnerability could lead to remote code execution

Adobe Illustrator version 25.2 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-23997

Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox 88...