Microsoft Windows OpenType Fonts CVE-2015-2460 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft .NET...

Microsoft Windows OpenType Fonts CVE-2015-2458 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft Window...

Microsoft Windows OpenType Fonts CVE-2015-2461 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft Window...

Microsoft Graphics Component Remote Code Execution (MS15-080: CVE-2015-2432)

Remote code execution vulnerabilities exist in Microsoft Windows Graphics Component. The vulnerability is due to an error in the way Microsoft Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts. A remote attacker can exploit this issue by enticing a victim to...

Microsoft Windows OpenType Fonts CVE-2015-2462 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft .NET...

Microsoft Font Driver Remote Code Execution Vulnerability (3079904)

This host is missing a critical security update according to Microsoft Bulletin MS15-078. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft releases Emergency Patch Update for all versions of Windows

In the wake of a critical Remote Code Execution vulnerability in all supported versions of its operating system platform, Microsoft has just issued an emergency fix. Yes, it’s time to patch your Windows operating system against an alarming security hole that could allow remote attackers to run...

Microsoft Issues Critical, Out-of-Band Patch for All Versions of Windows

Microsoft released an out-of-band patch Monday that addresses a critical remotely exploitable flaw in all versions of Windows. The vulnerability stems from how Windows’ Adobe Type Manager Library handles OpenType fonts. If a user was tricked into either opening a rigged document or visiting an...

MS15-078: Vulnerability in Microsoft Font Driver Could Allow Remote Code Execution (3079904)

The remote Windows host is affected by a remote code execution vulnerability in the Adobe Type Manager Library due to improper handling of OpenType fonts. A remote attacker can exploit this vulnerability by convincing a user to open a document or visit a website containing specially crafted...

KLA10635 RCE vulnerability in Microsoft Font Driver

A remote code execution vulnerability was found in Microsoft products. By exploiting this vulnerability malicious users can take complete control of the affected system. This vulnerability can be exploited remotely via a specially crafted OpenType fonts. Original advisories CVE-2015-2426...

MS15-078: Vulnerability in Microsoft font driver could allow remote code execution: July 16, 2015

None None...

VulnCheck KEV: CVE-2015-2426

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts...

Details Available on Patched Adobe, Windows Font Vulnerabilities

A Google Project Zero researcher has publicly disclosed details on a number of patched Adobe and Microsoft vulnerabilities, including one in the Adobe Type Manager Font Driver that could enable takeover of a number of systems supporting modern font engines. Mateusz Jurczyk pointed the finger at h...

[USN-2627-1] t1utils vulnerability

========================================================================== Ubuntu Security Notice USN-2627-1 June 03, 2015 t1utils vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...

t1utils memory corruption

Memory corruption on fonts manipulation...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The platform/fonts/shaping/HarfBuzzShaper.cpp file of Google Chrome browser contains errors related to incorrect initialization of long fields. As a result, the bug may cause a service failure through the use of a specially crafted Unicode-formatted text message...

USN-2627-1 t1utils vulnerability

Jakub Wilk discovered that t1utils incorrectly handled certain malformed fonts. If a user or automated system were tricked into opening a specially crafted font, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges...

CVE-2015-1262

Removed by vendor...

t1utils Buffer Overflow Vulnerability

t1utils is a library for manipulating PostScript Type 1 fonts. A buffer overflow vulnerability exists in t1utils that could be exploited by an attacker to execute arbitrary code or conduct a denial of service attack...

[SECURITY] Fedora 20 Update: t1utils-1.39-1.fc20

t1utils is a collection of programs for manipulating PostScript type 1 and type 2 fonts containing programs to convert between PFA ASCII format, PFB binary format, a human-readable and editable ASCII format, and Macintosh resource forks...