Amazon Linux AMI : t1lib (ALAS-2012-40)

Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics AFM files. If a specially crafted font file was opened by an application linked against t1lib, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the...

Kingsoft Writer 2012 WPS字体名称缓冲区溢出漏洞

BUGTRAQ ID: 61796 CVECAN ID: CVE-2013-3934 Kingsoft Writer是免费的字处理软件。 Kingsoft Writer 2012在处理字体名称时存在边界错误，攻击者利用带有超长字体名称的特制WPS文件可造成栈缓冲区溢出。 0 Kingsoft Corp Writer 2012 Kingsoft Corp Office 2012 厂商补丁： Kingsoft Corp ------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

libXfont memory corruption

Memory corruption on compressed font parsing...

CVE-2013-3181

usp10.dll in the Unicode Scripts Processor in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "Uniscribe Font Parsing Engine Memory Corruption Vulnerability."...

Memory corruption

usp10.dll in the Unicode Scripts Processor in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "Uniscribe Font Parsing Engine Memory Corruption Vulnerability."...

CVE-2013-3181

CVE-2013-3181 affects the Unicode Script Processor (USP10.DLL) used by Windows XP SP2/SP3 and Windows Server 2003 SP2. The vulnerability enables remote code execution via crafted OpenType fonts, described as the Uniscribe Font Parsing Engine Memory Corruption. Microsoft issued MS13-060 with patch...

CVE-2013-3181

usp10.dll in the Unicode Scripts Processor in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "Uniscribe Font Parsing Engine Memory Corruption Vulnerability."...

Microsoft Windows Uniscribe Font Parsing CVE-2013-3181 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability when handling crafted font data. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or webpage. A successful exploit may allow arbitrary code to run in the context of the...

Microsoft Windows Uniscribe Font Parsing Engine Memory Corruption (MS13-060; CVE-2013-3181)

A remote code execution vulnerability exists in the Unicode Scripts Processor included in affected versions of Microsoft Windows...

Adobe Digital Editions嵌入式字体处理内存破坏漏洞(CVE-2013-1377)

BUGTRAQ ID: 61528 CVECAN ID: CVE-2013-1377 Adobe Digital Editions是阅读和管理电子书及其他数字出版物的软件，支持工业标准电子书格式，例如PDF/A、EPUB。 Adobe Digital Editions 2.0.67532的rmsdkwrapper.dll模块会在处理嵌入字体流的CVT程序表时出错，攻击者通过PDF文件内的特制字体流，利用此漏洞可破坏内存。 0 Adobe Digital Editions 2.0.67532 厂商补丁： Adobe -----...

[SECURITY] Fedora 18 Update: fontmatrix-0.9.99-9.r1218.fc18

A powerful and well designed fonts manager...

OpenJDK: Resource denial of service (AWT, 8001038)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the...

Oracle Linux 4 : xorg-x11 (ELSA-2007-0126)

From Red Hat Security Advisory 2007:0126 : Updated X.org packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. X.org is an open source implementation of the ...

Oracle Linux 6 : java-1.6.0-openjdk (ELSA-2012-0729)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0729 advisory. 1:1.6.0.0-1.48.1.11.3 - Access gnome bridge jar is forced to have 644 permissions - Resolves: rhbz828751 1:1.6.0.0-1.47.1.11.3 - Modified patch3,...

Oracle Linux 5 / 6 : pango (ELSA-2011-0180)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0180 advisory. - Prevent heap corruption with malformed fonts. CVE-2011-0020 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 3 : freetype (ELSA-2010-0736)

From Red Hat Security Advisory 2010:0736 : Updated freetype packages that fix three security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

Oracle Linux 6 : freetype (ELSA-2011-1085)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1085 advisory. - Add freetype-2.3.11-CVE-2011-0226.patch Add better argument check for 'callothersubr'. - based on patches by Werner Lemberg, Alexei Podtelezhnikov and Matthia...

Oracle Linux 4 : tetex (ELSA-2007-1027)

From Red Hat Security Advisory 2007:1027 : Updated tetex packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX...

Oracle Linux 3 : freetype (ELSA-2010-0577)

From Red Hat Security Advisory 2010:0577 : Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base score...

Oracle Linux 4 : xorg-x11 (ELSA-2007-0519)

From Red Hat Security Advisory 2007:0519 : Updated X.org packages that correct a flaw in the way the X.Org X11 xfs font server starts are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. X.org is an...