RHEL 5 : Red Hat Network Satellite server IBM Java Runtime (RHSA-2011:0880)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0880 advisory. - TLS: MITM attacks via session renegotiation CVE-2009-3555 - krb5: null pointer dereference in GSS-API library leads to DoS...

Google Chrome < 24.0.1312.56 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 24.0.1312.56 and is, therefore, affected by the following vulnerabilities : - A use-after-free vulnerability exists related to font handling and canvas. CVE-2013-0839 - An error exists related to URL validation and the...

Adobe Acrobat Reader Open Type Integer Overflow (APSB13-02; CVE-2013-0604)

Adobe Reader is vulnerable to an integer overflow when parsing specially crafted Open Type font files...

Adobe Acrobat Reader True Type Font Parsing Remote Code Execution (APSB13-02; CVE-2013-0623)

Adobe Acrobat Reader is vulnerable to a parsing logic error in True Type Font handling. The vulnerability is due to an out of bound memory read and write access. Successful exploitation could cause the application to crash and possibly lead to code execution...

Ubuntu 8.04 LTS / 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : freetype vulnerabilities (USN-1686-1)

Mateusz Jurczyk discovered that FreeType did not correctly handle certain malformed BDF font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges. Note that Tenable Network...

Ubuntu Update for freetype USN-1686-1

Check for the Version of freetype OpenVAS Vulnerability Test $Id: gbubuntuUSN16861.nasl 8650 2018-02-03 12:16:59Z teissa $ Ubuntu Update for freetype USN-1686-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu: Security Advisory (USN-1686-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1686-1: FreeType vulnerabilities

Mateusz Jurczyk discovered that FreeType did not correctly handle certain malformed BDF font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges...

[USN-1686-1] FreeType vulnerabilities

========================================================================== Ubuntu Security Notice USN-1686-1 January 14, 2013 freetype vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: ...

HP-UX PHSS_43202 : s700_800 11.23 X Font Server Patch

s700800 11.23 X Font Server Patch : A potential security vulnerability has been identified with HP-UX running the X Font Server xfs. The vulnerability could be exploited locally to create a Denial of Service DoS, or allow unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

HP-UX PHSS_43355 : s700_800 11.11 X Font Server Patch

s700800 11.11 X Font Server Patch : A potential security vulnerability has been identified with HP-UX running the X Font Server xfs. The vulnerability could be exploited locally to create a Denial of Service DoS, or allow unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

HP-UX PHSS_43134 : s700_800 11.31 X Font Server Patch

s700800 11.31 X Font Server Patch : A potential security vulnerability has been identified with HP-UX running the X Font Server xfs. The vulnerability could be exploited locally to create a Denial of Service DoS, or allow unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

CVE-2012-1699

The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service memory corruption and crash or obtain...

CVE-2012-1699

The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service memory corruption and crash or obtain...

CVE-2012-1699

The CVE-2012-1699 entry concerns the xfs font server (Difs) in X.Org X11R6 up to 6.6 and XFree86 before 3.3.3. The root cause is that ProcSetEventMask in difs/events.c calls SendErrToClient with a mask value instead of a pointer. This can allow local users to cause memory corruption and a crash o...

Oracle Outside In WordPerfect File Processing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable products utilizing the Oracle Outside In technology. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

freetype -- Multiple vulnerabilities

The FreeType Project reports: Some vulnerabilities in the BDF implementation have been fixed. Users of this font format should upgrade...

Microsoft Windows multiple security vulnerabilities

Buffer overflow on OpenType and TrueType fonts parsing, memory corruption on filname handling, DirectPlay buffer overflow, DirectAccess IP-HTTPS insufficient certificate check...

Microsoft Windows TrueType Font (TTF)远程代码执行漏洞（MS12-078)

BUGTRAQ ID: 56842 CVECAN ID: CVE-2012-4786 Microsoft Windows是Microsoft开发的Windows是目前世界上用户最多、并且兼容性最强的操作系统。 Microsoft Windows未正确处理TrueType Font TTF文件而存在安全漏洞。通过诱使用户浏览恶意网站或打开恶意文件，未经身份验证的远程攻击者可利用此漏洞在内核态中执行任意代码。 0 Microsoft Windows RT Microsoft Windows 8 Microsoft Windows 7 Microsoft Windows XP...

openSUSE: Security Advisory for freetype2 (openSUSE-SU-2012:0489-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...