Debian DSA-3644-1 : fontconfig - security update

Tobias Stoeckmann discovered that cache files are insufficiently validated in fontconfig, a generic font configuration library. An attacker can trigger arbitrary free calls, which in turn allows double free attacks and therefore arbitrary code execution. In combination with setuid binaries using...

[SECURITY] Fedora 24 Update: fontconfig-2.11.94-7.fc24

Fontconfig is designed to locate fonts within the system and select them according to requirements specified by applications...

openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2016-944)

This update for java-180-openjdk fixes the following issues : - Upgrade to version jdk8u101 icedtea 3.1.0 - New in release 3.1.0 2016-07-25 : - Security fixes - S8079718, CVE-2016-3458: IIOP Input Stream Hooking boo989732 - S8145446, CVE-2016-3485: Perfect pipe placement Windows only boo989734 -...

catdvi Denial of Service Vulnerability

Catdvi is a program that converts Turks Device Independent DVI files into readable text. Catdvi-0.14 and previous versions failed to handle the global variable tfmtbl correctly, resulting in uninitialized files being used without initialization when reading specially constructed files, causing nu...

Font Variable Null Pointer Denial of Service Vulnerability in swfstrigns

SWFTools is a set of software tools for SWF manipulation and creation of utility authoring. swfstrings is a text parsing tool. In versions swftools-0.9.2, 0.9.1, 0.8.0, 0.8.1, 0.4.4, elements in the global static array fonts are set to 0x0 and fail to validate their read operation, resulting in a...

Updated harfbuzz packages fix security vulnerability

Two memory access issues, including a heap-based buffer overflow CVE-2015-8947 and incorrect table length check CVE-2016-2052 could lead to a denial of service when rendering a crafted OpenType font...

Adobe Reader and Acrobat Memory Corruption (APSB16-26: CVE-2016-4203)

A memory corruption vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error while loading a PDF containing a malicious ttf font. A remote attacker may exploit this issue by enticing a target user to open a malicious PDF file with an affected version of Adobe Reader ...

Google Chrome 'ByteArray::Get' method heap buffer overflow vulnerability

Google Chrome is a web browser developed by Google Google Inc. Google sfntly is one of the font toolkits for using, editing and creating SFNT-based fonts. Google sfntly used in versions of Google Chrome prior to 52.0.2743.82 The 'ByteArray::Get' method in the data/bytearray.cc file in versions...

CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

UBUNTU-CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

Heap overflow

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

CVE-2016-1709

CVE-2016-1709 describes a heap-buffer-overflow in the ByteArray::Get method of data/byte_array.cc in Google sfntly, affecting Google Chrome prior to 52.0.2743.82 (sfntly used by Chrome). The vulnerability could allow a remote attacker to cause a denial of service or other unspecified impact via a...

CVE-2016-1709

Removed by vendor...

360 Security Browser Exploits Homologation Policy Bypass Vulnerability

360 Security Browser 360 Security Browser is a browser based on the dual kernel of IE and Chrome launched by 360 Security Center, a product of cooperation between Window of the World developer Phoenix Studio and 360 Security Center. A bypass same-origin policy vulnerability exists in 360 Security...

CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue...

Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (3)

Application: Adobe Acrobat Reader DC Platforms: Windows,OSX Versions: 15.016.20045 and earlier Author: Sébastien Morin of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: July 12, 2016 CVE: CVE-2016-4203 COSIG-2016-28 1 Introduction 2 Report Timeline 3 Technical details ...

Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (4)

Application: Adobe Acrobat Reader DC Platforms: Windows,OSX Versions: 15.016.20045 and earlier Author: Sébastien Morin of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: July 12, 2016 CVE: CVE-2016-4208 COSIG-2016-27 1 Introduction 2 Report Timeline 3 Technical details ...