218 matches found
Outline Designer - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2016-035
This module enables you to mass administer book outlines and perform common operations through one interface, improving the usability for the book module. The module doesn't sufficiently sanitize titles when presenting them on this interface. This vulnerability is mitigated by the fact that an...
freetype: insufficient checking of first outline point in TTF parser (#35689)
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap write operation and memory corruption or possibly execute arbitrary code via a crafted TrueType font...
CVE-2012-1142
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap write operation and memory corruption or possibly execute arbitrary code via crafted glyph-outline data in a font...
Microsoft OpenType CFF Driver Font Data Stack Overflow (MS11-032; CVE-2011-0034)
OpenType is a font format developed jointly by Microsoft and Adobe as an extension of Apple's TrueType font format. An OpenType font file contains data, in table format, that comprises either a TrueType or a PostScript outline font. A remote code execution vulnerability has been reported in the w...
Microsoft OpenType CFF Driver Font Encoded Character Corruption (MS11-007; CVE-2011-0033)
OpenType is a font format developed jointly by Microsoft and Adobe as an extension of Apple's TrueType font format. An OpenType font file contains data, in table format, that comprises either a TrueType or a PostScript outline font. A remote code execution vulnerability has been reported in the w...
Fedora Update for fontforge FEDORA-2010-18573
Check for the Version of fontforge OpenVAS Vulnerability Test Fedora Update for fontforge FEDORA-2010-18573 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
SA-CONTRIB-2010-105 - Outline Designer - Cross Site Request Forgery
Outline Designer allows for easier creation and management of items in a Book. The Outline Designer modules does not properly protect some of its paths against Cross Site Request Forgeries CSRF, allowing an attacker to get a user with the permission to administer site configuration to change any...
MS10-032: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (979559)
The remote Windows host is running a version of the Windows kernel that is affected by one or more of the following vulnerabilities : - Improper validation of changes in certain kernel objects may allow a local attacker to execute arbitrary code in kernel mode and take complete control of the...
CVE-2009-0556
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in t...
feedDemon 2.7 - OPML Outline Tag Buffer Overflow
feedDemon 2.7 - OPML Outline Tag Buffer Overflow !/usr/local/bin/perl ----------------------------------------------------------------------------- FeedDemon version 2.7.0.0 Buffer overFlow Reference: http://security.bkis.vn/?p=329 https://www.securityfocus.com/bid/33630/info...
Authentication flaw
The Outline Designer module 5.x before 5.x-1.4 for Drupal changes each content reader's authentication level to match that of the content author, which might allow remote attackers to gain privileges...
CVE-2008-3096
The Outline Designer module 5.x before 5.x-1.4 for Drupal changes each content reader's authentication level to match that of the content author, which might allow remote attackers to gain privileges...
CVE-2008-3096
The CVE-2008-3096 issue affects the Drupal Outline Designer module (5.x before 5.x-1.4). The vulnerability arises because the module changes each content reader’s authentication level to match that of the content author, potentially allowing remote attackers to gain privileges. Documented affecte...
CVE-2008-3096
The Outline Designer module 5.x before 5.x-1.4 for Drupal changes each content reader's authentication level to match that of the content author, which might allow remote attackers to gain privileges...
Drupal Outline Designer Module 'outline_designer.module'安全绕过漏洞
BUGTRAQ ID: 30066 CNCAN ID：CNCAN-2008070703 Drupal Outline Designer是一款提供书目中可视的内容结构。 Drupal Outline Designer存在设计错误，远程攻击者可以利用漏洞获得对限制用户的内容查看。 目前没有详细漏洞细节提供。 Drupal Outline designer 5.x-1.3 升级到最新版本： http://drupal.org/node/277851...
SA-2008-043 - Outline designer - Privilege escalation
The Outline designer module provides a visual way of structuring content in books. A programming error in the module causes the current user to become authenticated as the author of the viewed content item. Versions affected Outline designer for Drupal 5.x prior to 5.x-1.4. Drupal core is not...
