RHEL 6 : freetype (RHSA-2011:1085)

Updated freetype packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

freetype2 -- execute arbitrary code or cause denial of service

Vincent Danen reports: Due to an error within the t1decoderparsecharstrings function src/psaux/t1decode.c and can be exploited to corrupt memory by tricking a user into processing a specially-crafted postscript Type1 font in an application that uses the freetype library...

Apple iOS Postscript Type字体处理缓冲区溢出漏洞

Apple iOS是一款运行在苹果iPhone和iPod touch设备上的最新的操作系统。 Jailbreakme 3 PDF 越狱使用Apple iOS操作系统中处理Postscript Type又称Adobe Type 1字体的一个缓冲区溢出漏洞，漏洞存在于t1decoderparsecharstrings函数，该函数用于解码Type 1字体文件中编码过的CharStrings字段。越狱漏洞中使用的字体文件中包含了一个351字节的特殊CharStrings的字段，当该函数处理这个特殊的...

Microsoft OpenType CFF Driver Font Data Stack Overflow (MS11-032; CVE-2011-0034)

OpenType is a font format developed jointly by Microsoft and Adobe as an extension of Apple's TrueType font format. An OpenType font file contains data, in table format, that comprises either a TrueType or a PostScript outline font. A remote code execution vulnerability has been reported in the w...

[SECURITY] Fedora 13 Update: abcm2ps-5.9.21-1.fc13

Abcm2ps is a package which converts music tunes from ABC format to Postscript. Based on abc2ps version 1.2.5, it was developed mainly to print Baroque organ scores which have independent voices played on one or many keyboards and a pedal-board. Abcm2ps introduces many extensions to the ABC langua...

[SECURITY] Fedora 14 Update: abcm2ps-5.9.21-1.fc14

Abcm2ps is a package which converts music tunes from ABC format to Postscript. Based on abc2ps version 1.2.5, it was developed mainly to print Baroque organ scores which have independent voices played on one or many keyboards and a pedal-board. Abcm2ps introduces many extensions to the ABC langua...

Microsoft OpenType CFF Driver Font Encoded Character Corruption (MS11-007; CVE-2011-0033)

OpenType is a font format developed jointly by Microsoft and Adobe as an extension of Apple's TrueType font format. An OpenType font file contains data, in table format, that comprises either a TrueType or a PostScript outline font. A remote code execution vulnerability has been reported in the w...

[SECURITY] Fedora 13 Update: evince-2.30.3-2.fc13

Evince is simple multi-page document viewer. It can display and print Portable Document Format PDF, PostScript PS and Encapsulated PostScript EPS files. When supported by the document format, evince allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents...

Fedora Update for evince FEDORA-2011-0208

Check for the Version of evince OpenVAS Vulnerability Test Fedora Update for evince FEDORA-2011-0208 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 14 Update: evince-2.32.0-3.fc14

Evince is simple multi-page document viewer. It can display and print Portable Document Format PDF, PostScript PS and Encapsulated PostScript EPS files. When supported by the document format, evince allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents...

Fedora Update for fontforge FEDORA-2010-18577

Check for the Version of fontforge OpenVAS Vulnerability Test Fedora Update for fontforge FEDORA-2010-18577 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for fontforge FEDORA-2010-18573

Check for the Version of fontforge OpenVAS Vulnerability Test Fedora Update for fontforge FEDORA-2010-18573 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

[SECURITY] Fedora 14 Update: xfig-3.2.5-25.b.fc14

Xfig is an X Window System tool for creating basic vector graphics, including bezier curves, lines, rulers and more. The resulting graphics can be saved, printed on PostScript printers or converted to a variety of other formats e.g., X11 bitmaps, Encapsulated PostScript, LaTeX. You should install...

[SECURITY] Fedora 13 Update: fontforge-20090923-4.fc13

FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts...

[SECURITY] Fedora 14 Update: fontforge-20100501-5.fc14

FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts...

CVE-2010-3704

CVE-2010-3704 affects the PDF parsing code (FoFiType1.parse) in xpdf (before 3.02pl5) and in Poppler up to 0.15.1, kdegraphics, and related products. The vulnerability stems from a PostScript Type 1 font handling path that uses a crafted font containing a negative array index, bypassing input val...

CVE-2010-3704

The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code v...

CentOS Update for cups CESA-2010:0754 centos3 i386

Check for the Version of cups OpenVAS Vulnerability Test CentOS Update for cups CESA-2010:0754 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

RedHat Update for poppler RHSA-2010:0749-01

Check for the Version of poppler OpenVAS Vulnerability Test RedHat Update for poppler RHSA-2010:0749-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for xpdf RHSA-2010:0751-01

Check for the Version of xpdf OpenVAS Vulnerability Test RedHat Update for xpdf RHSA-2010:0751-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...