9139 matches found
CVE-2005-0576
Unknown vulnerability in Standard Type Services Framework STSF Font Server Daemon stfontserverd in Solaris 9 allows local users to modify or delete arbitrary files...
CVE-2005-0577
Format string vulnerability in DNA MKBold-MKItalic 0.061 and earlier allows remote attackers to execute arbitrary code via crafted BDF font files...
[SA14381] Sun Solaris stfontserverd Arbitrary File Manipulation Vulnerability
TITLE: Sun Solaris stfontserverd Arbitrary File Manipulation Vulnerability SECUNIA ADVISORY ID: SA14381 VERIFY ADVISORY: http://secunia.com/advisories/14381/ CRITICAL: Less critical IMPACT: Manipulation of data, DoS WHERE: Local system OPERATING SYSTEM: Sun Solaris 9 http://secunia.com/product/95...
DEBIAN-CVE-2005-0543
Cross-site scripting XSS vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via 1 the strServer, cfgBgcolorOne, or strServerChoice parameters in selectserver.lib.php, 2 the bgcolor or rowno parameters in displaytbllinks.lib.php, the leftfontfamily...
mkbold-mkitalic -- format string vulnerability
The version 0.061 and prior have a format string vulnerability which can be triggered by using a carefully-crafted BDF font file...
CVE-2004-1595
The CVE-2004-1595 entry concerns ShixxNOTE 6.net (build 117) and describes a buffer overflow in the handling of font fields, allowing a remote attacker to execute arbitrary code. Connected sources confirm concrete exploitability: Metasploit/ShixxNOTE font-field overflow modules and exploits (e.g....
HP-UX PHSS_31179 : HP-UX Running xfs and stmkfont, Remote Unauthorized Access (HPSBUX01061 SSRT4773 rev.2)
s700800 11.11 X Font Server Patch : Potential security vulnerabilities have been reported with HP-UX running xfs and stmkfont. These vulnerabilities can be exploited to allow remote unauthorized access to resources owned by group 'bin.'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
HP-UX PHSS_28471 : HP-UX Running X Font Server (xfs) Software, Remote Unauthorized Access or Denial of Service (DoS) (HPSBUX00228 SSRT2429 rev.3)
s700800 11.22 X Font Server Patch : Potential buffer overflow in the X Font Server xfs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS28471. The text itself is copyright C Hewlett-Packard Development...
HP-UX PHSS_28469 : HP-UX Running X Font Server (xfs) Software, Remote Unauthorized Access or Denial of Service (DoS) (HPSBUX00228 SSRT2429 rev.3)
s700800 11.00 X Font Server Patch : Potential buffer overflow in the X Font Server xfs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS28469. The text itself is copyright C Hewlett-Packard Development...
HP-UX PHSS_28470 : HP-UX Running X Font Server (xfs) Software, Remote Unauthorized Access or Denial of Service (DoS) (HPSBUX00228 SSRT2429 rev.3)
s700800 11.11 X Font Server Patch : Potential buffer overflow in the X Font Server xfs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS28470. The text itself is copyright C Hewlett-Packard Development...
HP-UX PHSS_29744 : HPSBUX0302-241 SSRT3472 rev.3 HP-UX stmkfont potential unauthorized access
s700800 11.00 X Font Server Patch : There is a potential buffer overflow in /usr/bin/stmkfont. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS29744. The text itself is copyright C Hewlett-Packard Developme...
CVE-2004-0901
Microsoft Word for Windows 6.0 Converter MSWRD632.WPC, as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different...
DEBIAN-CVE-2004-1297
Buffer overflow in the processfonttable function in convert.c for unrtf 0.19.3 allows remote attackers to execute arbitrary code via a crafted RTF file...
DEBIAN-CVE-2004-2714
Unspecified vulnerability in Window Maker 0.80.2 and earlier allows attackers to perform unknown actions via format string specifiers in a font specification in WMGLOBAL, probably a format string vulnerability...
CVE-2004-0901
Microsoft Word for Windows 6.0 Converter MSWRD632.WPC, as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different...
CVE-2004-0901
CVE-2004-0901 (Font Conversion Vulnerability) affects WordPad’s Word for Windows 6.0 Converter (MSWRD632.WPC) used by WordPad. A crafted Word/RTF/WRI/ DOC file can trigger a buffer/length-check flaw, leading to remote code execution when opened by WordPad. Public advisories (MS04-041) document tw...
GNU UnRTF 0.19.3 - Font Table Conversion Buffer Overflow
GNU UnRTF 0.19.3 - Font Table Conversion Buffer Overflow source: https://www.securityfocus.com/bid/12030/info GNU UnRTF is prone to a buffer overflow vulnerability. This issue is exposed when the program converts RTF font table data. Since RTF documents may originate from an external or untrusted...
GNU UnRTF 0.19.3 - Font Table Conversion Buffer Overflow
source: https://www.securityfocus.com/bid/12030/info GNU UnRTF is prone to a buffer overflow vulnerability. This issue is exposed when the program converts RTF font table data. Since RTF documents may originate from an external or untrusted source, this vulnerability is considered to be remote in...
Microsoft Word for Windows 6.0 Converter Font Conversion Buffer Overflow Vulnerability
Description Microsoft Word for Windows 6.0 Converter is reported prone to a buffer overflow vulnerability. An attacker may exploit this issue to gain unauthorized access to a vulnerable computer in the context of the user running the application. This issue specifically exists in the Font...
XFree86 4.3 - Font Information File Buffer Overflow
// source: https://www.securityfocus.com/bid/9636/info It has been reported that the XFree86 X Windows system is prone to a local buffer overflow vulnerability. The issue arises from improper bounds checking when parsing the 'font.alias' file. Successful exploitation of this issue may allow an...