CVE-2013-0834

Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service out-of-bounds read via vectors involving glyphs...

CVE-2013-0834

Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service out-of-bounds read via vectors involving glyphs...

CVE-2013-0834

Removed by vendor...

CVE-2012-3716

CVE-2012-3716 : In Apple Mac OS X, the vulnerability affects OS X 10.7.x before 10.7.5 where CoreText mishandles text glyphs due to a bounds checking issue, enabling remote arbitrary code execution or a denial of service via out-of-bounds reads/writes. The published Apple advisory (APPLE-SA-2012-...

DEBIAN-CVE-2010-4819

The ProcRenderAddGlyphs function in the Render extension render/render.c in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service server crash via unspecified vectors related to an "input sanitization flaw."...

CVE-2012-0176

Double free vulnerability in Microsoft Silverlight 4 before 4.1.10329 on Windows allows remote attackers to execute arbitrary code via vectors involving crafted XAML glyphs, aka "Silverlight Double-Free Vulnerability."...

Double free

Double free vulnerability in Microsoft Silverlight 4 before 4.1.10329 on Windows allows remote attackers to execute arbitrary code via vectors involving crafted XAML glyphs, aka "Silverlight Double-Free Vulnerability."...

CVE-2012-0176

Double free vulnerability in Microsoft Silverlight 4 before 4.1.10329 on Windows allows remote attackers to execute arbitrary code via vectors involving crafted XAML glyphs, aka "Silverlight Double-Free Vulnerability."...

Adobe Reader Compound Glyphs Array Indexing Error Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Adobe Reade...

X.org: ProcRenderAddGlyphs input sanitization flaw

The ProcRenderAddGlyphs function in the Render extension render/render.c in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service server crash via unspecified vectors related to an "input sanitization flaw."...

[SECURITY] Fedora 14 Update: freetype-2.4.2-3.fc14

The FreeType engine is a free and portable font rendering engine, developed to provide advanced font support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is not a...

PT-2010-1173

Name of the Vulnerable Software and Affected Versions Adobe Reader versions 8.x through 8.2.5 Adobe Reader versions 9.x through 9.3 Description The issue is related to a stack-based buffer overflow in CoolType.dll, allowing remote attackers to execute arbitrary code or cause a denial of service v...

MDVA-2009:211 : pango

A bug in pango was preventing correct location of some glyphs when scaling was in effect. This update fixes this issue and enforce version dependency on cairo, which could cause crashes when upgrading Mandriva Linux distribution to release 2010.0. %NASLMINLEVEL 70300 @DEPRECATED@ This script has...

DEBIAN-CVE-2009-2688

Multiple integer overflows in glyphs-eimage.c in XEmacs 21.4.22, when running on Windows, allow remote attackers to cause a denial of service crash or execute arbitrary code via 1 the tiffinstantiate function processing a crafted TIFF file, 2 the pnginstantiate function processing a crafted PNG...

XEmacs多个整数溢出漏洞

Bugraq ID: 35473 XEmacs是一款强大的文本编辑器。 XEmacs存在多个漏洞，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 -glyphs-eimage.c包含的"tiffinstantiate"函数存在整数溢出错误，构建特殊的TIFF文件可触发。 -glyphs-eimage.c包含的"pnginstantiate"函数存在整数溢出错误，构建特殊的PNG文件可触发。 -glyphs-eimage.c包含的"jpeginstantiate"函数存在整数溢出错误，构建特殊的JPEG文件可触发。 XEmacs 21.4.22 目前没有解决方案提供：...

[SECURITY] Fedora 11 Update: freetype1-1.4-0.8.pre.fc11

The FreeType engine is a free and portable TrueType font rendering engine, developed to provide TrueType support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is no ...

[SECURITY] Fedora 10 Update: freetype1-1.4-0.8.pre.fc10

The FreeType engine is a free and portable TrueType font rendering engine, developed to provide TrueType support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is no ...

OpenJDK: Type1 font processing buffer overflow vulnerability

Integer signedness error in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and...

OpenJDK: Type1 font processing buffer overflow vulnerability

Integer signedness error in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and...

[SECURITY] Fedora Core 6 Update: freetype-2.2.1-17.fc6

The FreeType engine is a free and portable font rendering engine, developed to provide advanced font support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is not a...