9376 matches found
KLA11855 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. An information...
KLA11136 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure...
CVE-2017-13825
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CoreText" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory consumption via a crafted font file...
CVE-2017-13820
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ATS" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service memory corruption via a crafted font...
CVE-2017-13825
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CoreText" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory consumption via a crafted font file...
CVE-2017-13820
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ATS" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service memory corruption via a crafted font...
Memory corruption
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ATS" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service memory corruption via a crafted font...
Code injection
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CoreText" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory consumption via a crafted font file...
Denial Of Service (DoS)
MuPDF is vulnerable to denial of service DoS attacks and possibly other attacks. This vulnerability is possible because the xpsloadlinksinglyphs function doesn't verify if a font can be loaded before trying to load it. This can be triggered using a .xps file...
CVE-2017-13820
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ATS" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service memory corruption via a crafted font...
CVE-2017-13825
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CoreText" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory consumption via a crafted font file...
KB4042895: Windows 10 October 2017 Cumulative Update (KRACK)
The remote Windows host is missing security update 4042895. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtai...
Apple macOS High Sierra ATS Information Disclosure Vulnerability
Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.ATS is one of the application transport security components. A security vulnerability exists in the ATS component in Apple macOS High Sierra versions prior to 10.13.1. A remote attacker can exploit the...
Apple macOS High Sierra CoreText Memory Corruption Vulnerability
Apple macOS High Sierra is a set of Apple's dedicated operating system for Mac computers, and CoreText is one of the text engines that provides control over text formatting and text layout. A security vulnerability exists in the CoreText component of Apple macOS High Sierra versions prior to...
Firefox 58 to Block Canvas Browser Fingerprinting By Default to Stop Online Tracking
Do you know? Thousands of websites use HTML5 Canvas—a method supported by all major browsers that allow websites to dynamically draw graphics on web pages—to track and potentially identify users across the websites by secretly fingerprinting their web browsers. Over three years ago, the concern...
Apache OpenOffice DOC File Parsing Remote Code Execution Vulnerability
Apache OpenOffice is open and free word processing software. The OpenOffice Writer DOC file parser and WW8Fonts constructor handles DOC file vulnerabilities, allowing remote attackers to exploit the vulnerability by submitting a special file and tricking the user into parsing it, which can crash...
The vulnerability of the Windows operating system’s font library, allowing a hacker to execute arbitrary code
The vulnerability of the Windows operating system’s font library is related to improper handling of fonts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created website or document...
Pidgin MXIT mxit_convert_markup_tx Information Leak Vulnerability(CVE-2016-2380)
DESCRIPTION An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent to the server could potentially result in an out of bounds read. A user could be convinced to enter a particular string which would then get converted incorrectly and could lead...
Updated libxfont packages fix security vulnerabilities
In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash denial of service. This occurs because '\0'...
