CVE-2009-0232

Integer overflow in the Embedded OpenType EOT Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table, aka "Embedded OpenType Font Integer Overflow...

CVE-2009-0232

CVE-2009-0232: A remote-code-execution vulnerability in the Embedded OpenType (EOT) Font Engine. An integer overflow occurs while parsing EOT name tables, affecting Windows 2000 SP4; XP SP2/SP3; Server 2003 SP2; Vista SP1/SP2; and Server 2008 Gold/SP2. An attacker could exploit this via a crafted...

CVE-2009-0231

The Embedded OpenType EOT Font Engine T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers an integer truncation...

CVE-2009-0231

CVE-2009-0231 concerns a heap-based overflow in the Embedded OpenType Font Engine (T2EMBED.DLL) used by Microsoft Windows. The vulnerability stems from an integer truncation while processing OpenType font records, allowing remote attackers to execute arbitrary code by delivering a crafted EOT/Ope...

CVE-2009-2477

js/src/jstracer.cpp in the Just-in-time JIT JavaScript compiler aka TraceMonkey in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a...

Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities (961371))

This host is missing a critical security update according to Microsoft Bulletin MS09-029. OpenVAS Vulnerability Test $Id: secpodms09-029.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities 961371 Authors: Antu Sanadi Updated By:...

PT-2009-2906 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 Description: A remote code execution issue exists in the way Microsoft Windows Embedded OpenType EOT font technology...

PT-2009-2907 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue is related to an integer overflow in the Embedded OpenType EOT Font Engine, allowing remote attackers to execute arbitrary code via a crafted name table. A remote co...

Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities (961371)

This host is missing a critical security update according to Microsoft Bulletin MS09-029. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Embedded OpenType Font Engine Heap Overflow Vulnerability

Description Microsoft Windows is prone to a remotely exploitable heap-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. Remote attackers can exploit this issue to execute arbitrary machine...

Microsoft Windows Embedded OpenType Font Engine Integer Overflow Vulnerability

Description Microsoft Windows is prone to a remotely exploitable integer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. Remote attackers can exploit this issue to execute arbitrary machine code in...

Microsoft Security Bulletin MS09-029 - Critical Vulnerabilities in the Embedded OpenType Font Engine Could Allow Remote Code Execution (961371)

Microsoft Security Bulletin MS09-029 - Critical Vulnerabilities in the Embedded OpenType Font Engine Could Allow Remote Code Execution 961371 Published: July 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in a...

MS09-029: Vulnerabilities in the Embedded OpenType Font Engine Could Allow Remote Code Execution (961371)

The remote Windows host contains a version of the Embedded OpenType EOT Font Engine that is affected by multiple buffer overflow vulnerabilities due to the way the EOT font technology parses name tables in specially crafted embedded fonts. If an attacker can trick a user on the affected system in...

Mozilla Firefox 3.5 - Font tags Remote Buffer Overflow

Firefox 3.5 Vulnerability Firefox 3.5 Heap Spray Vulnerabilty Author: SBerry aka Simon Berry-Byrne Thanks to HD Moore for the insight and Metasploit for the payload Loremipsumdoloregkuw Loremipsumdoloregkuwiert Loremikdkw / Calc.exe / var shellcode =...

Fedora Core 9 FEDORA-2009-3666 (xorg-x11-xfs)

The remote host is missing an update to xorg-x11-xfs announced via advisory FEDORA-2009-3666. OpenVAS Vulnerability Test $Id: fcore20093666.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3666 xorg-x11-xfs Authors: Thomas Reinke Copyright: Copyright...

Fedora Core 10 FEDORA-2009-3651 (xorg-x11-xfs)

The remote host is missing an update to xorg-x11-xfs announced via advisory FEDORA-2009-3651. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Fedora Core 10 FEDORA-2009-3651 (xorg-x11-xfs)

The remote host is missing an update to xorg-x11-xfs announced via advisory FEDORA-2009-3651. OpenVAS Vulnerability Test $Id: fcore20093651.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3651 xorg-x11-xfs Authors: Thomas Reinke Copyright: Copyright...

[SECURITY] Fedora 10 Update: xorg-x11-xfs-1.0.5-3.1.fc10

X.Org X11 xfs font server...

[SECURITY] Fedora 9 Update: xorg-x11-xfs-1.0.5-2.1.fc9

X.Org X11 xfs font server...

acroread: multiple security fixes in version 8.1.6 (APSB09-07)

Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a PDF document with a crafted TrueType font...