CVE-2014-2241: Improper Input Validation

The 1 cf2initLocalRegionBuffer and 2 cf2initGlobalRegionBuffer functions in cff/cf2ft.c in FreeType before 2.5.3 do not properly check if a subroutine exists, which allows remote attackers to cause a denial of service assertion failure, as demonstrated by a crafted ttf file...

CVE-2014-2241

The 1 cf2initLocalRegionBuffer and 2 cf2initGlobalRegionBuffer functions in cff/cf2ft.c in FreeType before 2.5.3 do not properly check if a subroutine exists, which allows remote attackers to cause a denial of service assertion failure, as demonstrated by a crafted ttf file...

PT-2014-4577

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.3 Description The issue is related to the cf2 initLocalRegionBuffer and cf2 initGlobalRegionBuffer functions in cff/cf2ft.c, which do not properly check if a subroutine exists. This allows remote attackers to cau...

Oracle Java TTF Font Parsing Heap Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java Runtime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

CVE-2013-3903

Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to cause a denial of service reboot via a crafted TrueType font TTF file, aka "TrueType Font Parsing Vulnerability."...

PT-2013-4729

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows 8 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 Description A denial of service issue exists in the Microsoft Windows kernel, caused by improper processing of a specifical...

Microsoft Windows TTF CMAP Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

Adobe Acrobat Multiple Vulnerabilities April-2012 (Mac OS X)

This host is installed with Adobe Acrobat and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeacrobatmultvulnapr12macosx.nasl 6093 2017-05-10 09:03:18Z teissa $ Adobe Acrobat Multiple Vulnerabilities April-2012 Mac OS X Authors: Thanga Prakash S Copyright: Copyright c...

Design/Logic Flaw

Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows ...

CVE-2013-3129

CVE-2013-3129 concerns a TrueType Font (TTF) parsing vulnerability that allows remote code execution. Affected products include Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5; Silverlight 5 prior to 5.1.20513.0; and GDI+, DirectWrite, Journal in various Windows versions (XP through Windows ...

Oracle Java mort TTF Table Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the fontmanager...

Oracle Java GSUB TTF Table LookupCount Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the fontmanager...

PT-2013-3719

Name of the Vulnerable Software and Affected Versions Oracle Java affected versions not specified Description The issue is related to a remote code execution vulnerability in the Oracle Java GSUB TTF Table LookupCount. Recommendations At the moment, there is no information about a newer version...

PT-2013-3718

Name of the Vulnerable Software and Affected Versions Oracle Java affected versions not specified Description The issue concerns a remote code execution vulnerability related to the TTF Table Ligature Substitution in Oracle Java. Recommendations At the moment, there is no information about a newe...

Microsoft Windows 8未明拒绝服务漏洞(CVE-2013-2558)

CVE-2013-2558 Microsoft Windows 8是一款流行的操作系统。 Microsoft Windows 8在存在一个安全漏洞，允许攻击者构建恶意的TTF文件，诱使用户解析，可使系统崩溃。 0 Microsoft Windows 8 厂商解决方案 目前没有详细解决方案提供： http://www.microsoft.com...

Code injection

Unspecified vulnerability in Microsoft Windows 8 allows remote attackers to cause a denial of service reboot or possibly have unknown other impact via a crafted TrueType Font TTF file, as demonstrated by the 120612-69701-01.dmp error report...

CVE-2013-2558

Technical details about CVE-2013-2558 are not publicly provided in the supplied documents; no concrete affected products/versions/fixes are specified here. Monitor for updates.

PT-2013-3841

Name of the Vulnerable Software and Affected Versions Microsoft Windows 8 affected versions not specified Description The issue is related to an unspecified vulnerability in Microsoft Windows 8, allowing remote attackers to cause a denial of service, potentially leading to a system reboot, or...

CVE-2013-2558: Undefined Security Weakness

Unspecified vulnerability in Microsoft Windows 8 allows remote attackers to cause a denial of service reboot or possibly have unknown other impact via a crafted TrueType Font TTF file, as demonstrated by the 120612-69701-01.dmp error report...

Microsoft Windows TrueType Font (TTF)远程代码执行漏洞（MS12-078)

BUGTRAQ ID: 56842 CVECAN ID: CVE-2012-4786 Microsoft Windows是Microsoft开发的Windows是目前世界上用户最多、并且兼容性最强的操作系统。 Microsoft Windows未正确处理TrueType Font TTF文件而存在安全漏洞。通过诱使用户浏览恶意网站或打开恶意文件，未经身份验证的远程攻击者可利用此漏洞在内核态中执行任意代码。 0 Microsoft Windows RT Microsoft Windows 8 Microsoft Windows 7 Microsoft Windows XP...