CVE-2003-0581

CVE-2003-0581 concerns xfstt, a TrueType font server for the X Window System. The entry covers two issues: CAN-2003-0581 (buffer overruns in certain requests such as FS_QueryXExtents8/FS_QueryXBitmaps8, enabling remote DoS or possibly arbitrary code execution) and CAN-2003-0625 (handshake data co...

Microsoft XBox integer overflow

Dashboard buffer overflow during fonts parsing allows load and execute any code...

Microsoft Windows XP/2000 - Fontview Denial of Service

source: https://www.securityfocus.com/bid/6536/info Microsoft Windows is vulnerable to a denial of service condition when attempting to view certain OpenType fonts .otf. When a malformed font file is viewed with the default Windows font viewer, it will cause the system to Blue Screen and reboot...

iis-unicode.txt

Recently I received an email from Par Osterberg that directed my attention to a post in the Packetstorm forums: http://209.143.242.119/cgi-bin/cbmc/forums.cgi?authkey=anonymous&uname=anonymous&datopic=Windows&mesgcheck=defined&gum=474&editoron= An anonymous person posts that they can run arbitrar...

Security update 1970-01-01

...

Security update 1970-01-01

...

Single string is drawn by multiple fonts in the TextBox control of Windows Store application in Windows

None None...

Security Update for Lync 2010 X86 (KB 2693282)

This security update resolves one publicly disclosed vulnerability and three privately reported vulnerabilities in Microsoft Lync. The most severe vulnerabilities could allow remote code execution if a user views shared content that contains specially crafted TrueType fonts...

Security Update for Lync 2010 X64 (KB 2693282)

This security update resolves one publicly disclosed vulnerability and three privately reported vulnerabilities in Microsoft Lync. The most severe vulnerabilities could allow remote code execution if a user views shared content that contains specially crafted TrueType fonts...

Security Update for Office Communicator 2007 R2 (KB2708980)

This security update resolves one publicly disclosed vulnerability and three privately reported vulnerabilities in Microsoft Lync. The most severe vulnerabilities could allow remote code execution if a user views shared content that contains specially crafted TrueType fonts...

Security Update for Lync 2010 Attendee (Administrator level installation) (KB2696031)

This security update resolves one publicly disclosed vulnerability and three privately reported vulnerabilities in Microsoft Lync. The most severe vulnerabilities could allow remote code execution if a user views shared content that contains specially crafted TrueType fonts...

Security Update for Lync 2010 Attendant (KB 2702444)

This security update resolves one publicly disclosed vulnerability and three privately reported vulnerabilities in Microsoft Lync. The most severe vulnerabilities could allow remote code execution if a user views shared content that contains specially crafted TrueType fonts...