Untrusted applet causes DoS by filling up disk space

Sun Java Runtime Environment JRE 1.5.06 and earlier, JDK 1.5.06 and earlier, and SDK 1.5.06 and earlier allows remote attackers to cause a denial of service disk consumption by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory...

OpenJDK: Type1 font processing buffer overflow vulnerability

Integer signedness error in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and...

CVE-2009-1099

Integer signedness error in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and...

Code injection

Multiple unspecified vulnerabilities in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service disk consumption via vectors related to temporary font files and 1 "limits on Font...

CVE-2009-1100

Multiple unspecified vulnerabilities in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service disk consumption via vectors related to temporary font files and 1 "limits on Font...

CVE-2009-1099

Integer signedness error in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and...

CVE-2009-1099

Integer signedness error in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and...

CVE-2009-1100

Multiple unspecified vulnerabilities in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service disk consumption via vectors related to temporary font files and 1 "limits on Font...

CVE-2009-1100

CVE-2009-1100 affects Oracle Java SE/JDK/JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier. Vulnerable component: temporary font file handling and (1) limits on Font creation (CR 6522586) and (2) another unspecified vector (CR 6632886). Impact: remote denial of service via disk consumpti...

OpenJDK Truetype Font processing vulnerability (6751322)

Integer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file, which...

OpenJDK Font processing vulnerability (6733336)

Heap-based buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file...

CVE-2009-1100

Multiple unspecified vulnerabilities in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service disk consumption via vectors related to temporary font files and 1 "limits on Font...

Ubuntu Update for freetype, libxfont, xorg, xorg-server vulnerabilities USN-448-1

Ubuntu Update for Linux kernel vulnerabilities USN-448-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4481.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for freetype, libxfont, xorg, xorg-server vulnerabilities USN-448-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone...

Ubuntu: Security Advisory (USN-466-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for freetype vulnerabilities USN-643-1

Ubuntu Update for Linux kernel vulnerabilities USN-643-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6431.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for freetype vulnerabilities USN-643-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for freetype vulnerability USN-466-1

Ubuntu Update for Linux kernel vulnerabilities USN-466-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4661.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for freetype vulnerability USN-466-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for libcairo regression USN-550-3

Ubuntu Update for Linux kernel vulnerabilities USN-550-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN5503.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libcairo regression USN-550-3 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for libxfont, xorg-server vulnerabilities USN-571-1

Ubuntu Update for Linux kernel vulnerabilities USN-571-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5711.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libxfont, xorg-server vulnerabilities USN-571-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for xorg-server regression USN-571-2

Ubuntu Update for Linux kernel vulnerabilities USN-571-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN5712.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for xorg-server regression USN-571-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-571-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...