Lucene search
+L

681 matches found

exploitpack
exploitpack
•added 2019/08/15 12:00 a.m.•42 views

Microsoft Font Subsetting - DLL Heap Corruption in FixSbitSubTables

Microsoft Font Subsetting - DLL Heap Corruption in FixSbitSubTables -----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the specific glyphs used i...

7.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2019/08/15 12:00 a.m.•154 views

Microsoft Font Subsetting - DLL Heap Corruption in MakeFormat12MergedGlyphList

-----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the specific glyphs used in the document where the fonts are embedded. It is used by Windows G...

9.3CVSS7.5AI score0.13055EPSS
SaveExploits1
OSV
OSV
•added 2019/08/14 9:15 p.m.•8 views

CVE-2019-1154

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

5.5CVSS5.8AI score0.01661EPSS
SaveExploits0References1
OSV
OSV
•added 2019/08/14 9:15 p.m.•9 views

CVE-2019-1158

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

5.5CVSS6.7AI score0.01659EPSS
SaveExploits0References1
NVD
NVD
•added 2019/08/14 9:15 p.m.•23 views

CVE-2019-1158

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

5.5CVSS6.7AI score0.01659EPSS
SaveExploits0References1
NVD
NVD
•added 2019/08/14 9:15 p.m.•33 views

CVE-2019-1154

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

5.5CVSS5.9AI score0.01661EPSS
SaveExploits0References1
NVD
NVD
•added 2019/08/14 9:15 p.m.•31 views

CVE-2019-1143

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

5.5CVSS6.7AI score0.01661EPSS
SaveExploits0References1
Prion
Prion
•added 2019/08/14 9:15 p.m.•24 views

Information disclosure

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1143, CVE-2019-1158...

2.1CVSS5.1AI score0.01661EPSS
SaveExploits0References1Affected Software2
Prion
Prion
•added 2019/08/14 9:15 p.m.•22 views

Information disclosure

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1143, CVE-2019-1154...

2.1CVSS5.1AI score0.01661EPSS
SaveExploits0References1Affected Software5
OpenVAS
OpenVAS
•added 2019/08/14 12:00 a.m.•128 views

Microsoft Windows Multiple Vulnerabilities (KB4512501)

This host is missing a critical security update according to Microsoft KB4512501 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

10CVSS7.5AI score0.83433EPSS
SaveExploits15References1
Microsoft CVE
Microsoft CVE
•added 2019/08/13 7:00 a.m.•39 views

Windows Graphics Component Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

5.5CVSS1.7AI score0.01661EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2019/08/13 7:00 a.m.•34 views

Windows Graphics Component Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

5.5CVSS1.7AI score0.01661EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2019/08/13 12:00 a.m.•4 views

PT-2019-3005 · Microsoft · Windows Gdi +1

Name of the Vulnerable Software and Affected Versions: Windows GDI component affected versions not specified Description: An information disclosure issue exists due to the improper handling of memory contents by the Windows GDI component. This could allow an attacker to obtain sensitive...

5.5CVSS7.7AI score0.01661EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2019/08/13 12:00 a.m.•73 views

KB4512491: Windows Server 2008 August 2019 Security Update

The remote Windows host is missing security update 4512491 or cumulative update 4512476. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC. An attacker who...

9.8CVSS8.2AI score0.2622EPSS
SaveExploits10References40
Positive Technologies
Positive Technologies
•added 2019/08/13 12:00 a.m.•5 views

PT-2019-2997 · Microsoft · Windows Gdi +1

Name of the Vulnerable Software and Affected Versions: Windows GDI component affected versions not specified Description: An information disclosure issue exists due to the improper handling of memory contents by the Windows GDI component. This could allow an attacker to obtain sensitive...

5.5CVSS7.8AI score0.01659EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2019/07/29 1:57 p.m.•40 views

CVE-2019-1102

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'...

8.2AI score0.11345EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/07/29 1:57 p.m.•36 views

CVE-2019-1101

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-111...

6.6AI score0.06728EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/07/29 1:48 p.m.•44 views

CVE-2019-1100

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1101, CVE-2019-111...

6.6AI score0.06728EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/07/18 12:00 a.m.•17 views

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to execute arbitrary code.

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.4CVSS5.8AI score0.11345EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/07/18 12:00 a.m.•14 views

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.06786EPSS
SaveExploits0References2
Rows per page
Query Builder