CVE-2011-0177

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font...

Memory corruption

CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a document that contains a crafted embedded font...

Buffer overflow

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded Type 1 font...

Heap overflow

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code via a document that contains a crafted embedded OpenType font...

Buffer overflow

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font...

Buffer overflow

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded TrueType font...

CVE-2011-0175

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded TrueType font...

CVE-2011-0174

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code via a document that contains a crafted embedded OpenType font...

CVE-2011-0177

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font...

CVE-2011-0175

CVE-2011-0175 involves multiple buffer overflow vulnerabilities in Apple Type Services (ATS) on Mac OS X up to 10.6.7. A crafted embedded TrueType font in a document could trigger heap/buffer overflows, potentially enabling remote arbitrary code execution. The Red Hat/OpenVAS/Nessus references co...

CVE-2011-0177

CVE-2011-0177 describes multiple buffer overflow issues in Apple Type Services (ATS) on Mac OS X before 10.6.7. A crafted SFNT-embedded font in a document could trigger arbitrary code execution. Affected components include ATS/OpenType font handling; other related CVEs in the same release cover T...

CVE-2011-0176

CVE-2011-0176 describes multiple heap/buffer overflow vulnerabilities in Apple Type Services (ATS) on Mac OS X prior to 10.6.7. The flaw allows remote attackers to execute arbitrary code by opening or viewing a document containing a crafted embedded Type 1 font. Affected component is ATS handling...

CVE-2011-0176

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded Type 1 font...

CVE-2011-0179

CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a document that contains a crafted embedded font...

CVE-2011-0174

CVE-2011-0174 describes a heap-based buffer overflow in Apple Type Services (ATS) on Mac OS X prior to 10.6.7. A crafted embedded OpenType font in a document can allow remote arbitrary-code execution. The issue affects Mac OS X 10.6.x up to 10.6.6; Apple’s mitigation is the Mac OS X 10.6.7 Securi...

About the security content of Mac OS X v10.6.7 and Security Update 2011-001

About the security content of Mac OS X v10.6.7 and Security Update 2011-001 Last Modified: March 21, 2011 Article: HT4581 Email this article Print this page Summary This document describes the security content of Mac OS X v10.6.7 and Security Update 2011-001, which can be downloaded and installed...

flash-plugin: multiple code execution flaws (APSB11-02)

Unspecified vulnerability in Adobe Flash Player before 10.2.152.26 allows remote attackers to execute arbitrary code via a crafted font...

OpenJDK Java2D font-related system property leak (6985453)

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to 2D...

RHEL 6 : java-1.6.0-ibm (RHSA-2011:0357)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0357 advisory. The IBM 1.6.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. This update fixes severa...

[SECURITY] Fedora 14 Update: pango-1.28.1-5.fc14

Pango is a library for laying out and rendering of text, with an emphasis on internationalization. Pango can be used anywhere that text layout is nee ded, though most of the work on Pango so far has been done in the context of the GTK+ widget toolkit. Pango forms the core of text and font handlin...