9314 matches found
MS KB2639658: Vulnerability in TrueType Font Parsing Could Allow Elevation of Privilege (DEPRECATED)
The remote host has an unspecified code execution vulnerability in the Win32k TrueType font parsing engine. Specially crafted TrueType fonts are not properly handled, which could allow arbitrary code execution in kernel mode. A remote attacker could exploit this vulnerability by tricking a user...
PT-2011-1229
Name of the Vulnerable Software and Affected Versions Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2, R2, and R2 SP1 Windows 7 Gold and SP1 Description The issue is related to errors in processing objects in memory in the TrueType font parsing engine in...
Microsoft Windows 'Win32k.sys' TrueType Font Handling Remote Code Execution Vulnerability
Description Microsoft Windows kernel is prone to a remote code-execution vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into opening a specially malformed TrueType font. Successful exploits can allow attackers to execute arbitrary code with kernel-level...
Mandriva Update for freetype2 MDVSA-2011:157 (freetype2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mandriva Update for freetype2 MDVSA-2011:157 (freetype2)
Check for the Version of freetype2 OpenVAS Vulnerability Test Mandriva Update for freetype2 MDVSA-2011:157 freetype2 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
RedHat Update for freetype RHSA-2011:1402-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-3248
Integer signedness error in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font table in a QuickTime movie file...
Integer overflow
Integer signedness error in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font table in a QuickTime movie file...
CVE-2011-3248
CVE-2011-3248 affects Apple QuickTime (pre-7.7.1). A signedness error in the handling of font tables embedded in QuickTime movie files can be exploited by a crafted file to cause a remote code execution or application crash. The vulnerability is documented in ZDI-12-005 and tracked publicly with ...
CVE-2011-3248
Integer signedness error in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font table in a QuickTime movie file...
Opera < 11.52 Multiple Vulnerabilities
Binary data 6053.prm...
Opera < 11.52 Multiple Vulnerabilities
Binary data 800854.prm...
QuickTime < 7.7.1 Multiple Vulnerabilities
Binary data 6052.prm...
Adobe Reader复合字型索引签名扩展远程代码执行漏洞
BUGTRAQ ID: 49581 CVE ID: CVE-2011-2441 Adobe Reader也被称为Acrobat Reader是美国Adobe公司开发的一款优秀的PDF文档阅读软件。Acrobat是1993年推出针对企业、技术人员和创意专业人士的系列产品，使智能文档的传送和协作更为灵活、可靠和安全。 Adobe Acrobat和Reader在实现上存在远程栈缓冲区溢出漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码。 Adobe Reader处理复合字型时存在特定漏洞。当字型多于0x7FFF...
freetype security update
CentOS Errata and Security Advisory CESA-2011:1402 Updated freetype packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring...
RHEL 6 : freetype (RHSA-2011:1402)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1402 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. It also loads, hints, and renders individual glyphs...
Important: Red Hat Security Advisory: freetype security update
Updated freetype packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
freetype: FT_Bitmap_New integer overflow, FreeType TT_Vary_Get_Glyph_Deltas improper input validation
FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font, a different vulnerability than CVE-2011-0226...
Mandriva Linux Security Advisory : freetype2 (MDVSA-2011:157)
A vulnerability has been discovered and corrected in freetype2 : FreeType allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font CVE-2011-3256. A regression was found in freetype2 in Mandriva Enterprise Server 5 that caused ugly font...
Opera < 11.52 Multiple Vulnerabilities
The version of Opera installed on the remote Windows host is prior to 11.52. It is, therefore, affected by multiple vulnerabilities : - An unspecified use-after-free error exists due to improper validation of user-supplied input. A remote attacker can exploit this, via a specially crafted web pag...