Open Type Font Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Adobe Type Manager Font Driver improperly handles specially crafted OpenType fonts. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacke...

VulnCheck KEV: CVE-2016-7256

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system...

MS16-132: Security update for Microsoft graphics component: November 8, 2016

This security update resolves vulnerabilities in Microsoft Windows that could allow a remote code execution when the Windows font library improperly handles specially crafted embedded fonts.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The most severe of the...

FontParser Information Disclosure Vulnerability in Multiple Apple Products

Apple iOS is an operating system developed for mobile devices, tvOS is a smart TV operating system, and watchOS is a smart watch operating system. fontParser is one of the font parsing components. An information disclosure vulnerability exists in FontParser in several Apple products. The...

Wordpress plugin free-google-fonts has multiple cross-site scripting vulnerabilities

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. WordPress can also be used as a content management system CMS. Wordpress plugin free-google-fonts has an xss vulnerability due to...

[SECURITY] Fedora 24 Update: ghostscript-9.20-2.fc24

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...

Microsoft Windows GDI Remote Code Execution Vulnerability

Microsoft Windows is a popular operating system. A security vulnerability exists in Microsoft Windows where the GDI component fails to properly handle embedded fonts, allowing remote attackers to exploit the vulnerability to build malicious fonts that can be parsed by the user and can be executed...

evolutio.cz XSS vulnerability

Vulnerable URL: http://www.evolutio.cz/custom-fonts/cronospro-semibold.swf?txt=%3Ca%20href=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3Eclick%20me!%3C/a%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicl...

rsm1210.mytroop.us XSS vulnerability

Vulnerable URL: http://rsm1210.mytroop.us/misc/sifr/fonts/wildride.swf?txt=%3Ca%20href=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3Eclick%20me!%3C/a%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Microsoft Office Multiple Remote Code Execution Vulnerabilities (3192884)

This host is missing a critical security update according to Microsoft Bulletin MS16-120. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-120: Description of the Security and Quality Rollup for the .NET Framework 4.5.2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 11, 2016

MS16-120: Description of the Security and Quality Rollup for the .NET Framework 4.5.2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 11, 2016 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework...

MS16-120: Description of the Security and Quality Rollup for .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2: October 11, 2016

MS16-120: Description of the Security and Quality Rollup for .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2: October 11, 2016 View products that this article applies to. Summary This update resolves vulnerabilities in Microsoft .NET Framework. The vulnerabilities could allow remote...

MS16-120: Description of the Security and Quality Rollup for .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: October 11, 2016

MS16-120: Description of the Security and Quality Rollup for .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: October 11, 2016 View products that this article applies to. Summary This update resolves vulnerabilities in Microsoft .NET Framework. The...

MS16-120: Description of the Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012: October 11, 2016

MS16-120: Description of the Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012: October 11, 2016 View products that this article applies to. Summary This update resolves vulnerabilities in Microsoft .NET Framework. The vulnerabilities could allow remote code execution if ...

MS16-120: Description of the security update for the .NET Framework 3.5.1 for Windows 7 and Windows Server 2008 R2 Service Pack 1: October 11, 2016

MS16-120: Description of the security update for the .NET Framework 3.5.1 for Windows 7 and Windows Server 2008 R2 Service Pack 1: October 11, 2016 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework. The vulnerabilities could...

MS16-120: Security update for Microsoft graphics component: October 11, 2016

Resolves vulnerabilities in Microsoft Windows, Microsoft Office, Skype for Business, Silverlight, Microsoft Lync, and in the Microsoft .NET Framework that could allow remote code execution if a user either visits a specially crafted website or opens a specially crafted document. This update...

Apple OS X ATS Memory Corruption Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.Apple Type Service ATS is one of the font type services. A memory corruption vulnerability exists in ATS in Apple OS X versions prior to 10.12. A remote attacker can exploit this vulnerability to execute arbitrary...

VMware Workstation and Workstation Player Memory Corruption Vulnerability (CNVD-2016-07812)

VMware Workstation and VMware Workstation Player are virtual machine software products from VMware, Inc. VMware Workstation is a paid, feature-rich virtual machine software. VMware Workstation Player is a free and open source virtual machine software with simpler features. A memory corruption...

VMware Workstation - vprintproxy.exe TrueType NAME Tables Heap Buffer Overflow

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=849 As already discussed in a number of reports in this tracker 285, 286, 287, 288, 289, 292, VMware Workstation current version 12.1.1 build-3770994 ships with a feature called...

VMware Workstation 12.x < 12.5.0 Multiple Vulnerabilities (VMSA-2016-0014)

The version of VMware Workstation installed on the remote host is 12.x prior to 12.5.0. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exists in Cortado ThinPrint due to improper validation of user-supplied input. An attacker on the guest can exploit...