DEBIAN-CVE-2009-4035

The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a...

xpdf: buffer overflow in FoFiType1::parse

The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a...

Microsoft Windows EOT Font Table Directory Integer Overflow

$Id: ms09065eotinteger.rb 7470 2009-11-11 23:48:53Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Fedora 10 : texlive-2007-46.fc10 (2009-10730)

Fri Oct 23 2009 Jindrich Novy 2007-46 - add missing dependency on kpathsea - Thu Oct 15 2009 Jindrich Novy 2007-45 - make kpathsea not dependent on texlive - fix lacheck again 451513 - fix dvips configuration 467542 - update kpathsea description and summary 519257 - use upstream patch to fix pool...

MS Bracing For Malware Attacks From Embedded Fonts

Heads up to all Microsoft Windows users: If you’re running Windows 2000, Windows XP or Windows Server 2003, stop what you’re doing and immediately download and apply the MS09-065 update released earlier this week. Security researchers say it’s only a matter of time — days not weeks — before...

PT-2009-4921 · Microsoft · Windows Server 2003 +3

Name of the Vulnerable Software and Affected Versions: Windows 2000 SP4 Windows XP SP2 Windows XP SP3 Windows Server 2003 SP2 Description: A remote code execution issue exists due to the improper parsing of font code when building a table of directory entries. This allows remote attackers to...

Opera Multiple Vulnerabilities - Nov09 (Windows)

This host is installed with Opera Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnnov09win.nasl 4869 2016-12-29 11:01:45Z teissa $ Opera Multiple Vulnerabilities - Nov09 Windows Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks...

Opera Multiple Vulnerabilities (Nov 2009) - Windows

Opera Web Browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Authentication flaw

Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site...

CVE-2009-3832

Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site...

CVE-2009-3832

Opera for Windows prior to 10.01 is affected by CVE-2009-3832 due to the browser rendering UI using web fonts, allowing a crafted site to spoof the address bar. Root cause: Web fonts used in the UI are not prevented in rendering. Impact is spoofing the address field; exploitation status is not do...

CVE-2009-3832

Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site...

CVE-2009-3832: URL Redirection to Untrusted Site

Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site...

Opera < 10.01 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 10.01. Such versions are potential affected by multiple issues : - Specially crafted domain names can cause a memory corruption in Opera, which may lead to a crash or possibly remote code execution. 938 - Opera may allow scripts to...

Opera < 10.01 Multiple Vulnerabilities

Binary data 800863.prm...

Web fonts can be used to spoof the page address – Opera Security Advisories

In some cases, a Web font intended to be used for page content could be incorrectly used by Opera to render parts of the user interface, including the address field. This can be used by a malicious site to display a false domain name in the address field...

Web fonts can be used to spoof the page address

In some cases, a Web font intended to be used for page content could be incorrectly used by Opera to render parts of the user interface, including the address field. This can be used by a malicious site to display a false domain name in the address field...

[SECURITY] Fedora 11 Update: xpdf-3.02-15.fc11

Xpdf is an X Window System based viewer for Portable Document Format PDF files. Xpdf is a small and efficient program which uses standard X fonts...

SLES9: Security update for GhostScript

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ghostscript-fonts-other ghostscript-fonts-rus ghostscript-fonts-std ghostscript-library ghostscript-serv ghostscript-x11 libgimpprint libgimpprint-devel For...

SLES9: Security update for Ghostscript

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libgimpprint-devel ghostscript-x11 ghostscript-serv libgimpprint ghostscript-fonts-other ghostscript-library ghostscript-fonts-std ghostscript-fonts-rus For...