CVE-2010-2302

Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE:...

CVE-2010-2302

Removed by vendor...

CVE-2010-2302

CVE-2010-2302 is a use-after-free in WebKit’s WebCore affecting Google Chrome prior to 5.0.375.70. The flaw involves remote fonts used with shadow DOM trees and can cause memory corruption, leading to a denial of service or potential arbitrary code execution. Affected component: WebKit/WebCore in...

CVE-2010-1771

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving fonts...

CVE-2010-1771

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving fonts...

CVE-2010-1771

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving fonts...

CVE-2010-1771

Removed by vendor...

CVE-2010-1255

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to "glyph outline information" and TrueType...

CVE-2010-1255

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to "glyph outline information" and TrueType...

PT-2010-2960 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue allows local users to execute arbitrary code via vectors related to glyph outline information and TrueType fonts. An elevation of privilege vulnerability exists due ...

CVE-2010-2027

Mathematica 7, when running on Linux, allows local users to overwrite arbitrary files via a symlink attack on 1 files within /tmp/MathLink/ or 2 /tmp/fonts$$.conf...

CVE-2010-0987

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted embedded fonts in a Shockwave file...

Heap overflow

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted embedded fonts in a Shockwave file...

CVE-2010-0987

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted embedded fonts in a Shockwave file...

PT-2010-2710 · Adobe · Shockwave Player

Name of the Vulnerable Software and Affected Versions: Adobe Shockwave Player versions prior to 11.5.7.609 Description: The issue is related to a heap-based buffer overflow that could allow remote attackers to execute arbitrary code. This is achieved through crafted embedded fonts in a Shockwave...

Mozilla Firefox WOFF Font Processing Integer Overflow (CVE-2010-1028)

Web Open Fonts Format WOFF is a compressed version of sfnt-based fonts Apple TrueType, Microsoft OpenType and Open FontFormat fonts. Mozilla Foundation included support to the WOFF format starting from Firefox 3.6. The new font format files use the extension ".woff". A remote code execution...

Google Chrome Multiple Vulnerabilities Windows - May10

This host is installed with Google Chrome Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnmay10.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome Multiple Vulnerabilities Windows - May10 Authors: Madhuri D Copyright: Copyright c 2010...

Google Chrome Multiple Vulnerabilities Windows (May 2010)

Google Chrome Web Browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mac OS X Multiple Vulnerabilities (Security Update 2010-003)

The remote host is running a version of Mac OS X 10.6 or 10.5 that does not have Security Update 2010-003 applied. This security update contains a fix for an issue in Apple Type Services involving its handling of embedded fonts. If an attacker can trick a user into viewing or downloading a docume...

Apple Patches Pwn2Own Flaw That Hacked Safari

Apple today shipped a patch to fix the drive-by download vulnerability used by Charlie Miller left to hack a fully patched MacBook via the Safari browser. Miller’s hack was part of this year’s CanSecWest Pwn2Own contest where Apple’s flagship browser fell for the third straight year. In the attac...