XFree86 4.x - CopyISOLatin1Lowered Font_Name Buffer Overflow

XFree86 4.x - CopyISOLatin1Lowered FontName Buffer Overflow source: https://www.securityfocus.com/bid/9652/info It has been reported that the XFree86 X Windows system is prone to a local buffer overflow vulnerability. The issue arises from improper bounds checking when parsing the 'font.alias'...

CVE-2003-0581

X Fontserver for Truetype fonts xfstt 1.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a 1 FSQueryXExtents8 or 2 FSQueryXBitmaps8 packet, and possibly other types of packets, with a large numranges value, which causes an out-of-bounds array access...

CVE-2003-0581

CVE-2003-0581 concerns xfstt, a TrueType font server for the X Window System. The entry covers two issues: CAN-2003-0581 (buffer overruns in certain requests such as FS_QueryXExtents8/FS_QueryXBitmaps8, enabling remote DoS or possibly arbitrary code execution) and CAN-2003-0625 (handshake data co...

Microsoft XBox integer overflow

Dashboard buffer overflow during fonts parsing allows load and execute any code...

Microsoft Windows XP/2000 - Fontview Denial of Service

source: https://www.securityfocus.com/bid/6536/info Microsoft Windows is vulnerable to a denial of service condition when attempting to view certain OpenType fonts .otf. When a malformed font file is viewed with the default Windows font viewer, it will cause the system to Blue Screen and reboot...

iis-unicode.txt

Recently I received an email from Par Osterberg that directed my attention to a post in the Packetstorm forums: http://209.143.242.119/cgi-bin/cbmc/forums.cgi?authkey=anonymous&uname=anonymous&datopic=Windows&mesgcheck=defined&gum=474&editoron= An anonymous person posts that they can run arbitrar...

Security update 1970-01-01

...

Security Update for Lync 2010 Attendee (Administrator level installation) (KB2696031)

This security update resolves one publicly disclosed vulnerability and three privately reported vulnerabilities in Microsoft Lync. The most severe vulnerabilities could allow remote code execution if a user views shared content that contains specially crafted TrueType fonts...

Single string is drawn by multiple fonts in the TextBox control of Windows Store application in Windows

None None...

Security update 1970-01-01

...

Security Update for Lync 2010 Attendant (KB 2702444)

This security update resolves one publicly disclosed vulnerability and three privately reported vulnerabilities in Microsoft Lync. The most severe vulnerabilities could allow remote code execution if a user views shared content that contains specially crafted TrueType fonts...

Security Update for Lync 2010 X86 (KB 2693282)

This security update resolves one publicly disclosed vulnerability and three privately reported vulnerabilities in Microsoft Lync. The most severe vulnerabilities could allow remote code execution if a user views shared content that contains specially crafted TrueType fonts...

Security Update for Lync 2010 X64 (KB 2693282)

This security update resolves one publicly disclosed vulnerability and three privately reported vulnerabilities in Microsoft Lync. The most severe vulnerabilities could allow remote code execution if a user views shared content that contains specially crafted TrueType fonts...

Security Update for Office Communicator 2007 R2 (KB2708980)

This security update resolves one publicly disclosed vulnerability and three privately reported vulnerabilities in Microsoft Lync. The most severe vulnerabilities could allow remote code execution if a user views shared content that contains specially crafted TrueType fonts...