9374 matches found
MS16-120: Description of the security update for the .NET Framework 4.5.2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 11, 2016
MS16-120: Description of the security update for the .NET Framework 4.5.2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 11, 2016 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework. The...
MS16-120: Description of the security update for the .NET Framework 3.5 for Windows Server 2012: October 11, 2016
MS16-120: Description of the security update for the .NET Framework 3.5 for Windows Server 2012: October 11, 2016 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework. The vulnerabilities could allow remote code execution if a us...
Microsoft Windows True Type Font Parsing Elevation of Privilege (MS16-120: CVE-2016-7182)
A memory corruption vulnerability exists in the Win32k-GDI component. The vulnerability is due to the way Windows Graphics Component handles objects in memory. An attacker who successfully exploits this vulnerability could run arbitrary code in kernel mode...
Microsoft Windows GDI+ Information Disclosure (MS16-120: CVE-2016-3263)
An information disclosure vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way the True Type Font TTF driver handles objects in memory. A remote attacker could exploit this vulnerability by enticing a target user to open a specially crafted EMF fil...
Microsoft Windows True Type Font Parsing Information Disclosure (MS16-120: CVE-2016-3209)
An information disclosure vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way the True Type Font TTF driver handles objects in memory. A remote attacker could exploit this vulnerability by enticing a target user to open a specially crafted EMF fil...
Microsoft Windows GDI+ Information Disclosure (MS16-120: CVE-2016-3262)
An information disclosure vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way the True Type Font TTF driver handles objects in memory. A remote attacker could exploit this vulnerability by enticing a target user to open a specially crafted EMF fil...
CVE-2016-1000142
Reflected XSS in wordpress plugin parsi-font v4.2.5...
CVE-2016-1000142
Reflected XSS in wordpress plugin parsi-font v4.2.5...
CVE-2016-1000126
Reflected XSS in wordpress plugin admin-font-editor v1.8...
Cross site scripting
Reflected XSS in wordpress plugin admin-font-editor v1.8...
CVE-2016-1000126
Reflected XSS in wordpress plugin admin-font-editor v1.8...
Cross site scripting
Reflected XSS in wordpress plugin parsi-font v4.2.5...
CVE-2016-1000142
Reflected XSS in wordpress plugin parsi-font v4.2.5...
CVE-2016-1000126
Reflected XSS in wordpress plugin admin-font-editor v1.8...
CVE-2016-1000142
The CVE-2016-1000142 entry corresponds to a reflected cross-site scripting flaw in WordPress MW Font Changer plugin (parsi-font) versions up to 4.2.5. The vulnerability arises in the plugin’s reflected XSS via the vulnerable parameter handling, specifically in the CSS.php path, enabling injection...
CVE-2016-1000126
CVE-2016-1000126 is a reflected Cross-Site Scripting vulnerability affecting the WordPress plugin Admin Font Editor (versions 1.8 and earlier). The connected nuclei template confirms the issue is a reflected XSS in the plugin, enabling an attacker to execute arbitrary JavaScript in a victim’s bro...
ffmpeg array out-of-bounds vulnerability
FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams. Under the LGPL or GPL license. It provides a complete solution for recording, converting, and streaming audio and video. A security vulnerability exists in ffmpeg3.1.4 where an...
FontParser Buffer Overflow Vulnerability in Multiple Apple Products
Apple iOS and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is a smart TV operating system; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems; watchOS is a smart watch FontParser is one ...
Adobe Digital Editions ePub Font Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Digital Editions. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...