Microsoft Works File Converter FontName buffer overflow

Added: 06/15/2009 CVE: CVE-2009-1533 BID: 35184 OSVDB: 54939 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows command execution when a user opens a WPS file...

FortiGuard Advisory: Adobe Reader/Acrobat TrueType Font Processing Memory Corruption Vulnerability

Adobe Reader/Acrobat TrueType Font Processing Memory Corruption Vulnerability 2009.June.10 Fortinet's FortiGuard Global Security Research Team Discovers Memory Corruption Vulnerability in Adobe Reader / Acrobat. Summary: ======== A memory corruption vulnerability exists when processing PDF...

Memory corruption

Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a PDF document with a crafted TrueType font...

CVE-2009-1857

Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a PDF document with a crafted TrueType font...

CVE-2009-1857

Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a PDF document with a crafted TrueType font...

CVE-2009-1857

Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a PDF document with a crafted TrueType font...

CVE-2009-1857

Adobe Reader/Acrobat affected: Reader 7 and Acrobat 7 before 7.1.3; Reader 8 and Acrobat 8 before 8.1.6; Reader 9 and Acrobat 9 before 9.1.2. Root cause: memory corruption via a crafted TrueType font in a PDF document. Impact: denial of service or possible arbitrary code execution. Remediation: u...

Memory corruption

CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted font data...

CVE-2009-1705

CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted font data...

CVE-2009-1705

Apple Safari on Windows (

Microsoft Works Oversized Font Buffer Overflow (MS09-024; CVE-2009-1533)

Microsoft Works is home productivity software suite with fewer features than the Microsoft Office suite.The Microsoft Works Converter allows the user to open, edit, and save files in the Microsoft Works file format. A remote code execution vulnerability has been discovered in Microsoft Works...

Ubuntu: Security Advisory (USN-767-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-720-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ACDSee产品TIFF及字体文件解析缓冲区溢出漏洞

BUGTRAQ ID: 35175,35176 ACDSee是一款图象查看、转换、管理工具，可使用在Microsoft Windows操作系统下。 如果用户使用ACDSee产品打开了畸形的TIFF图形或字体文件的话，就可以触发多个缓冲区溢出，导致执行任意代码。 ACD Systems, Inc ACDSee 9.x ACD Systems, Inc ACDSee 11.x ACD Systems, Inc ACDSee 10.x ACD Systems, Inc ACDSee Photo Manager Pro 2.5 ACD Systems, Inc ACDSee Photo...

Solaris Update for Font Server 108118-06

Check for the Version of Font Server OpenVAS Vulnerability Test Solaris Update for Font Server 108118-06 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Solaris Update for Font Server 108118-06

Check for the Version of Font Server OpenVAS Vulnerability Test Solaris Update for Font Server 108118-06 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

ACDSee Products TIFF and Font Parsing Buffer Overflow Vulnerabilities

VUPEN Security Research Advisory - VUPEN-SR-2009-03 Advisory URL: http://www.vupen.com/english/advisories/2009/1471 June 02, 2009 I. BACKGROUND ---------------------- ACDSee Photo Manager 2009 lets you quickly view and find photos, fix flaws, and share your favorites through e-mail, prints and fr...

Multiple ACDSee applications vulnerabilities

Buffer overflow on TIFF images and font parsing...

[SECURITY] Fedora 11 Update: freetype1-1.4-0.8.pre.fc11

The FreeType engine is a free and portable TrueType font rendering engine, developed to provide TrueType support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is no ...

[SECURITY] Fedora 10 Update: freetype1-1.4-0.8.pre.fc10

The FreeType engine is a free and portable TrueType font rendering engine, developed to provide TrueType support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is no ...