9374 matches found
CVE-2017-3041
CVE-2017-3041 affects Adobe Acrobat Reader up to certain legacy builds (11.0.19 and earlier; 15.006.30280 and earlier; 15.023.20070 and earlier). It describes an exploitable memory corruption vulnerability when parsing font data in the MakeAccessible plugin, which could lead to arbitrary code exe...
CVE-2017-3041
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability when parsing font data in the MakeAccessible plugin. Successful exploitation could lead to arbitrary code execution...
CVE-2017-0192
The CVE-2017-0192 entry describes an information disclosure in the Microsoft Windows ATMFD.dll (Adobe Type Manager Font Driver). Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 bui...
CVE-2017-0192
The Adobe Type Manager Font Driver ATMFD.dll in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold , 1511, 1607, and 1703 allows an attacker to gain sensitive information via a specially...
CVE-2017-3038
Adobe Acrobat/Reader (Classic and Continuous/Reader DC) is affected by CVE-2017-3038 due to a memory corruption in TTF stream parsing, impacting Windows and macOS/Classic tracks for versions up to 11.0.19, 15.006.30280 and 15.023.20070 and earlier. The issue is addressed in Adobe APSB17-11 (2017)...
Microsoft Windows Multiple Vulnerabilities (KB4015219)
This host is missing an important security update according to Microsoft security update KB4015219. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Microsoft Windows 'ATMFD.dll' Information Disclosure Vulnerability (KB4015380)
This host is missing an important security update according to Microsoft KB4015380. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Microsoft Windows Monthly Rollup (KB4015551)
This host is missing a monthly rollup according to Microsoft KB4015551. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
April 11, 2017—KB4015548 (Security-only update)
None None...
OpenType Font Driver Information Disclosure Vulnerability
An information disclosure vulnerability exists in Windows Adobe Type Manager Font Driver ATMFD.dll when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed. Note that this...
Microsoft ATMFD.dll Information Disclosure (CVE-2017-0192)
An information disclosure vulnerability exists in Adobe Type Manager Font Driver ATMFD.dll. The vulnerability is caused when the Adobe Type Manager Font Driver ATMFD.dll improperly handles objects in memory. An attacker can exploit this vulnerability by enticing a user to open a specially crafted...
Microsoft Windows Font Object Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing o...
KLA11835 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A memory corrupti...
Notes on Windows Uniscribe Fuzzing
Posted by Mateusz Jurczyk of Google Project Zero Among the total of 119 vulnerabilities with CVEs fixed by Microsoft in the March Patch Tuesday a few weeks ago, there were 29 bugs reported by us in the font-handling code of the Uniscribe library. Admittedly the subject of font-related security ha...
Apple iOS/tvOS/macOS/watchOS Denial of Service Vulnerability (CNVD-2017-05003)
iOS is a mobile operating system developed by Apple Inc. First announced at Macworld on January 9, 2007, it was initially designed for use with the iPhone, and has since been applied to the iPod touch, iPad, and Apple TV. tvOS is an Apple-developed system based on iOS. tvOS is the operating syste...
Apple iOS/tvOS/macOS/watchOS Information Disclosure Vulnerability (CNVD-2017-04934)
iOS is a mobile operating system developed by Apple Inc. First announced at Macworld on January 9, 2007, it was originally designed for use with the iPhone, and has since been applied to the iPod touch, iPad, and Apple TV. tvOS is an Apple-developed system based on iOS. tvOS is the operating syst...
Apple iOS/tvOS/macOS/watchOS Denial of Service Vulnerability (CNVD-2017-04877)
iOS is a mobile operating system developed by Apple Inc. First announced at Macworld on January 9, 2007, it was initially designed for use with the iPhone, and has since been applied to the iPod touch, iPad, and Apple TV. tvOS is an Apple-developed system based on iOS. tvOS is the operating syste...
Apple iOS/tvOS/macOS/watchOS Information Disclosure Vulnerability
iOS is a mobile operating system developed by Apple Inc. First announced at the Macworld conference on January 9, 2007, it was originally designed for use with the iPhone, and has since been applied to the iPod touch, iPad, and Apple TV. tvOS is an Apple-developed system based on iOS. tvOS is the...
KLA10992 Multiple vulnerabilities in Adobe Acrobat and Adobe Reader
Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitary code and possibly cause a denial of service. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerabilities in the XML Forms...
