Microsoft Windows LoadUvsTable() Buffer Overflow

Date: 15-03-2017 Author: Hossein Lotfi https://twitter.com/hosselot CVE: CVE-2016-7274 1. Description An integer overflow error within the "LoadUvsTable" function of usp10.dll can be exploited to cause a heap-based buffer overflow. Full analysis is available at:...

MS17-014: Description of the security update for Word 2016: March 14, 2017

None None...

UBUNTU-CVE-2016-10244

The parsecharstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted file...

Debian Security Advisory DSA 3792-1 (libreoffice - security update)

Ben Hayak discovered that objects embedded in Writer and Calc documents may result in information disclosure. Please see https://www.libreoffice.org/about-us/security/advisories/cve-2017-3157/ for additional information. OpenVAS Vulnerability Test $Id: deb3792.nasl 8091 2017-12-13 06:22:57Z teiss...

[SECURITY] Fedora 25 Update: ghostscript-9.20-6.fc25

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...

MS15-044: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: May 12, 2015

MS15-044: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: May 12, 2015 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET Framework. These vulnerabilities could allow remote...

MS15-044: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: May 12, 2015

MS15-044: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: May 12, 2015 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET...

MS15-080: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: August 11, 2015

MS15-080: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: August 11, 2015 View products that this article applies to. Summary This security update resolves vulnerabilities in the Microsoft .NET Framework and...

MS15-097: Description of the security update for the graphics component in Windows Vista and Windows Server 2008: September 8, 2015

MS15-097: Description of the security update for the graphics component in Windows Vista and Windows Server 2008: September 8, 2015 Summary This security update resolves vulnerabilities in Windows, Microsoft Office, and Microsoft Lync. The most severe of these vulnerabilities could allow remote...

MS15-044: Description of the security update for the .NET Framework 4.6 RC on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: May 12, 2015

MS15-044: Description of the security update for the .NET Framework 4.6 RC on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: May 12, 2015 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET Framework. These...

MS15-080: Description of the security update for the .NET Framework 4.5/4.5.1/4.5.2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: August 11, 2015

MS15-080: Description of the security update for the .NET Framework 4.5/4.5.1/4.5.2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: August 11, 2015 View products that this article applies to. Summary This security update resolves vulnerabilities in the Microsoft .NET...

MS15-080: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: August 11, 2015

MS15-080: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: August 11, 2015 View products that this article applies to. Summary This security update resolves vulnerabilities in the Microsoft .NET Framework and Microsoft Silverlight. These...

Memory corruption

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via TrueType fonts embedd...

CVE-2016-7083

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via TrueType fonts embedd...

CVE-2016-7083

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via TrueType fonts embedd...

CVE-2016-7083

CVE-2016-7083 — VMware Workstation/Player 12.x prior to 12.5.0 (Windows) is vulnerable when Cortado ThinPrint virtual printing is enabled. The flaw stems from handling TrueType fonts embedded in EMFSPOOL, which could let a guest OS user execute arbitrary code on the host or trigger a host memory ...

CVE-2016-7083

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via TrueType fonts embedd...

Microsoft Office Information Disclosure (MS16-148: CVE-2016-7276)

An information disclosure vulnerability exists in Microsoft Office. The vulnerability is due to an improper handling of malformed embedded fonts. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

fontconfig security and bug fix update

2.10.95-10 - Fix a regression in the previous change. 1355930 2.10.95-9 - CVE-2016-5384: Validate offsets in cache files properly. 1355930 2.10.95-8 - Update 45-latin.conf to add some hints to fall back for Windows fonts 1073460...

Microsoft Windows Open Type Font Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists when the Windows Font Library fails to properly handle specially designed embedded fonts. An attacker who successfully exploited this vulnerability could tak...