DSA-3461-1 freetype - security update

Bulletin has no description...

USN-2862-1: Pygments vulnerability

It was discovered that Pygments incorrectly sanitized strings used to search system fonts. An attacker could possibly use this issue to execute arbitrary code...

Apple OS X CoreGraphics Font File Handling Code Execution Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X CoreGraphics handles font files with a security vulnerability that allows attackers to exploit the vulnerability to build malicious fonts that can be tricked into parsing by applications, which can crash the application or execu...

Microsoft Windows Graphics Memory Corruption Vulnerability (CNVD-2015-08116)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A memory corruption vulnerability exists in the Windows font library of Microsoft Windows. The vulnerability exists because the program does not properly handle specially designed embedded fonts. A remo...

Microsoft Silverlight Remote Code Execution Vulnerability (3106614)

This host is missing a critical security update according to Microsoft Bulletin MS15-129. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft .NET Framework Remote Code Execution Vulnerabilities (3104503)

This host is missing a critical security update according to Microsoft Bulletin MS15-128. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS15-128: Security Update for Microsoft Graphics Component to Address Remote Code Execution (3104503)

The remote Windows host is affected by multiple remote code execution vulnerabilities due to improper handling of embedded fonts by the Windows font library. A remote attacker can exploit these by convincing a user to open a file or visit a website containing a specially crafted embedded font,...

KLA10718 Code execution vulnerabilities in Microsoft Graphics Component

Improper fonts handling was found in Microsoft Graphics Component used in Multiple Microsoft products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed content. Original advisories CVE-2015-6108...

MS15-115: Security update for Windows to address remote code execution: November 10, 2015

Resolves vulnerabilities in Windows that could allow remote code execution if an attacker convinces a user to open a specially crafted document or to go to an untrusted webpage that contains embedded fonts.SummaryThis security update resolves vulnerabilities in Windows. The most severe of the...

Apple iOS Denial of Service Vulnerability (CNVD-2015-07141)

Apple iOS is an operating system for handheld devices developed by Apple Inc. A denial of service vulnerability exists in Apple iOS versions prior to 9.1, OS X 10.11.1,watchOS versions prior to 2.0.1. It allows remote attackers to execute arbitrary code or launch denial of service attacks via...

Apple iOS/OS X FontParser Memory Corruption Vulnerability (CNVD-2015-07110)

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in FontParser in Apple iOS versions prior to 9.1 and Apple OS X versions prior to...

Apple iOS/OS X FontParser Memory Corruption Vulnerability (CNVD-2015-07111)

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in FontParser in Apple iOS versions prior to 9.1 and Apple OS X versions prior to...

Apple iOS Denial of Service Vulnerability (CNVD-2015-07147)

Apple iOS is an operating system for handheld devices developed by Apple Inc. A denial of service vulnerability exists in Apple iOS versions prior to 9.1 and OS X versions prior to 10.11.1. Allows remote attackers to execute arbitrary code or cause a denial of service via crafted font files...

chromium-browser: CORS bypass in CSS fonts

The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets CSS implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows...

Font <= 7.5 - Authenticated Path Traversal

The Font - official webfonts plugin of Fonts For Web. NO CODING! Just click & change font size, color and font face visually! WordPress plugin was affected by an Authenticated Path Traversal security vulnerability...

FreeType DoS

Crash on fonts parsing...

Oracle: Security Advisory (ELSA-2007-0731)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : libXfont (ALAS-2015-597)

An integer overflow flaw was found in the way libXfont processed certain Glyph Bitmap Distribution Format BDF fonts. A malicious, local user could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with the privileges of the X.Org server. CVE-2015-1802 An integer...

Important: libXfont

Issue Overview: An integer overflow flaw was found in the way libXfont processed certain Glyph Bitmap Distribution Format BDF fonts. A malicious, local user could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with the privileges of the X.Org server. CVE-2015-1802...

Windows ATMFD.DLL CharString Stream Out-of-Bounds Reads

Source: https://code.google.com/p/google-security-research/issues/detail?id=382&can=1 We have encountered a number of Windows kernel crashes in the ATMFD.DLL OpenType driver while processing corrupted OTF font files, such as: --- DRIVERPAGEFAULTBEYONDENDOFALLOCATION d6 N bytes of memory was...