PT-2009-4921 · Microsoft · Windows Server 2003 +3

Name of the Vulnerable Software and Affected Versions: Windows 2000 SP4 Windows XP SP2 Windows XP SP3 Windows Server 2003 SP2 Description: A remote code execution issue exists due to the improper parsing of font code when building a table of directory entries. This allows remote attackers to...

Opera Multiple Vulnerabilities - Nov09 (Windows)

This host is installed with Opera Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnnov09win.nasl 4869 2016-12-29 11:01:45Z teissa $ Opera Multiple Vulnerabilities - Nov09 Windows Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks...

Opera Multiple Vulnerabilities (Nov 2009) - Windows

Opera Web Browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-3832

Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site...

Authentication flaw

Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site...

CVE-2009-3832

Opera for Windows prior to 10.01 is affected by CVE-2009-3832 due to the browser rendering UI using web fonts, allowing a crafted site to spoof the address bar. Root cause: Web fonts used in the UI are not prevented in rendering. Impact is spoofing the address field; exploitation status is not do...

CVE-2009-3832

Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site...

Opera < 10.01 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 10.01. Such versions are potential affected by multiple issues : - Specially crafted domain names can cause a memory corruption in Opera, which may lead to a crash or possibly remote code execution. 938 - Opera may allow scripts to...

Opera < 10.01 Multiple Vulnerabilities

Binary data 800863.prm...

Web fonts can be used to spoof the page address – Opera Security Advisories

In some cases, a Web font intended to be used for page content could be incorrectly used by Opera to render parts of the user interface, including the address field. This can be used by a malicious site to display a false domain name in the address field...

Web fonts can be used to spoof the page address

In some cases, a Web font intended to be used for page content could be incorrectly used by Opera to render parts of the user interface, including the address field. This can be used by a malicious site to display a false domain name in the address field...

[SECURITY] Fedora 11 Update: xpdf-3.02-15.fc11

Xpdf is an X Window System based viewer for Portable Document Format PDF files. Xpdf is a small and efficient program which uses standard X fonts...

SLES9: Security update for GhostScript

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ghostscript-fonts-other ghostscript-fonts-rus ghostscript-fonts-std ghostscript-library ghostscript-serv ghostscript-x11 libgimpprint libgimpprint-devel For...

SLES9: Security update for Ghostscript

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libgimpprint-devel ghostscript-x11 ghostscript-serv libgimpprint ghostscript-fonts-other ghostscript-library ghostscript-fonts-std ghostscript-fonts-rus For...

openSUSE 10 Security Update : xemacs (xemacs-6412)

Specially crafted tiff, png and jpeg images could cause integer overflows in xemacs and possible system compromise. CVE-2009-2688 Additionally two non-security bugs were fixed that enable xemacs to use the configured fonts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

Uploading large fonts for PDF export fails with XSRF error

When uploading souizhs.ttf font that we use due to its comprehensive UTF8 support, I'm getting XSRF validation error: quote Your request could not be processed because a required security token was not present in the request. You may need to re-submit the form or reload the page. quote I tried...

PT-2009-2906 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 Description: A remote code execution issue exists in the way Microsoft Windows Embedded OpenType EOT font technology...

Memory corruption

CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted font data...

CVE-2009-1705

CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted font data...

CVE-2009-1705

CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted font data...