Microsoft Windows PDF Library DirectWrite Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...

Vulnerability of t1_check_unusual_charstring in the TeX Live typesetting system, allowing a hacker to execute arbitrary code

The vulnerability of the t1checkunusualcharstring function in the TeX Live typesetting system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by loading malicious fonts...

Moderate: Red Hat Security Advisory: fontforge security update

An update for fontforge is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

ALBA-2020:1902 liberation-fonts bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

liberation-fonts bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

liberation-fonts bug fix and enhancement update

An update is available for liberation-fonts. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

Adobe Bridge TTF File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

Microsoft Windows and Windows Server Remote Code Execution Vulnerability (CNVD-2020-23401)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows and Windows Server, whic...

Microsoft Windows and Windows Server Remote Code Execution Vulnerability (CNVD-2020-24063)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in the Microsoft Windows Adobe Font Manager...

CVE-2020-0687

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'...

Adobe Font Manager Library Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format. For all systems except Windows 10, an attacker who successfully exploited the vulnerability coul...

Microsoft Graphics Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data...

VulnCheck KEV: CVE-2020-0938

Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts Adobe Type 1 PostScript format that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who...

MS15-097: Description of the security update for Microsoft Lync 2013 (Skype for Business): September 8, 2015

Resolves vulnerabilities in Microsoft Lync 2013 that could allow remote code execution if a user opens a specially crafted document or goes to an untrusted webpage that contains embedded OpenType fonts.SummaryThis security update resolves vulnerabilities in Microsoft Lync 2013. These...

MS15-097: Description of the security update for Office 2010: September 8, 2015

Resolves vulnerabilities in Windows, Office, and Lync that could allow remote code execution if a user opens a specially crafted document or goes to an untrusted webpage that contains embedded OpenType fonts.SummaryThis security update resolves vulnerabilities in Microsoft Office that could allow...

MS15-080: Description of the security update for Microsoft Lync 2013 (Skype for Business): August 11, 2015

Resolves vulnerabilities in Microsoft Lync 2013 that could allow remote code execution if a user opens a specially crafted document or goes to an untrusted webpage that contains embedded TrueType or OpenType fonts.SummaryThis security update resolves vulnerabilities in Microsoft Lync 2013. These...

MS15-097: Description of the security update for Skype for Business 2016: September 30, 2015

Resolves vulnerabilities in Skype for Business 2016 that could allow remote code execution if a user opens a specially crafted document or goes to an untrusted webpage that contains embedded OpenType fonts.SummaryThis security update resolves vulnerabilities in Skype for Business 2016 that could...

MS15-044: Description of the security update for Microsoft Office 2010 Service Pack 2

Resolves vulnerabilities that could allow remote code execution if a user opens a specially crafted document or goes to an untrusted webpage that contains embedded TrueType fonts.IntroductionThis security update resolves vulnerabilities in Windows, Microsoft Office, and Microsoft Lync that could...

MS15-128: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 in Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: December 8, 2015

MS15-128: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 in Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: December 8, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET...

MS15-128: Description of the security update for the .NET Framework 3.5 in Windows 8 and Windows Server 2012: December 8, 2015

MS15-128: Description of the security update for the .NET Framework 3.5 in Windows 8 and Windows Server 2012: December 8, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework. The vulnerabilities could allow remote code...