2544 matches found
OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
PT-2026-5286
Name of the Vulnerable Software and Affected Versions Gnome Fonts Viewer version 3.34.0 Description Gnome Fonts Viewer version 3.34.0 contains a heap corruption issue that allows attackers to trigger an out-of-bounds write by using a malicious TTF font file. An attacker can create a specially...
Multiple Apple Products TrueTypeScaler Component Out-of-Bounds Read Vulnerability
Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. trueTypeScaler is a font file processing component of the... TrueTypeScaler is a font file processing...
Microsoft Windows and Microsoft Windows Server Remote Code Execution Vulnerability (CNVD-2020-02189)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows and Microsoft Windows...
CVE-2019-1468
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Code Execution Vulnerability'...
Remote code execution
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Code Execution Vulnerability'...
CVE-2019-1468
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Code Execution Vulnerability'...
Win32k Graphics Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete dat...
[SECURITY] Fedora 30 Update: xpdf-4.02-2.fc30
Xpdf is an X Window System based viewer for Portable Document Format PDF files. Xpdf is a small and efficient program which uses standard X fonts...
OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
UBUNTU-CVE-2019-19308
In texttoglyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section due to a gstrconcat call that returns NULL...
Fedora 30 : webkit2gtk3 (2019-4213e37211)
Improve performance of querying system fallback fonts. - Dont use prgname in dbus-proxy socket path. - Fix thread-safety issues in image decoders. - Fix the build with WebDriver disabled. - Disable accelerated compositing when we fail to initialize the EGL dispaly under Wayland. - Fill the...
DEBIAN-CVE-2010-4653
An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts...
CVE-2010-4653
An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts...
CVE-2010-4653
CVE-2010-4653 describes an integer overflow in poppler before 0.16.3 when parsing CharCodes for fonts. Affected component: Poppler (fonts parsing). Root cause: integer overflow during CharCodes parsing. Impact as per sources: potential for overflow, with downstream effects described in OSV entrie...