Information disclosure

An information disclosure vulnerability exists in Windows Adobe Type Manager Font Driver ATMFD.dll when it fails to properly handle objects in memory, aka 'OpenType Font Driver Information Disclosure Vulnerability'...

CVE-2019-1412

CVE-2019-1412 affects the Windows Adobe Type Manager Font Driver (ATMFD.dll). The vulnerability is an information-disclosure flaw caused by improper handling of objects in memory, leading to partial confidentiality impact. Exploitation is Local with low attack complexity; no explicit exploitation...

Microsoft Windows 'ATMFD.dll' CVE-2019-1412 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Syste...

CVE-2018-0788

The Windows Adobe Type Manager Font Driver Atmfd.dll in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 and R2 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "OpenType Font Driver Elevation of...

CVE-2018-0754

The CVE-2018-0754 entry concerns the Windows Adobe Type Manager Font Driver (Atmfd.dll). Multiple sources confirm an information-disclosure vulnerability arising from the way objects are handled in memory within Atmfd.dll, affecting Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2, W...

CVE-2018-0788

CVE-2018-0788 affects the Windows Adobe Type Manager Font Driver (ATMFD.dll) on Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, and Windows Server 2012/R2. The vulnerability stems from how ATMFD.dll handles objects in memory, allowing local elevation of privilege. Impact is ele...

Windows 2008 January 3 2018 Multiple Security Updates

The remote Windows host is missing multiple security updates released on 2018/01/03. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerabilities exists in the way that the Color Management Module ICM32.dll handles objects in memory. This vulnerability allo...

KB4056888: Windows 10 Version 1511 January 2018 Security Update (Meltdown)(Spectre)

The remote Windows host is missing security update 4056888 or 4075200. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local user access to...

Description of the security update for the ATMFD.dll information disclosure vulnerability in Windows Server 2008: January 3, 2018

Description of the security update for the ATMFD.dll information disclosure vulnerability in Windows Server 2008: January 3, 2018 Summary An information disclosure vulnerability exists in Adobe Type Manager Font Driver ATMFD.dll when it fails to properly handle objects in memory. An attacker who...

Microsoft Windows - Kernel ATMFD.DLL Out-of-Bounds Read due to Malformed Name INDEX in the CFF Table

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1213 We have encountered a Windows kernel crash in the ATMFD.DLL OpenType driver while processing a corrupted OTF font file, see below: --- DRIVERPAGEFAULTBEYONDENDOFALLOCATION d6 ...

Windows Kernel ATMFD.DLL out-of-bounds read due to malformed Name INDEX in the CFF table(CVE-2017-8483)

We have encountered a Windows kernel crash in the ATMFD.DLL OpenType driver while processing a corrupted OTF font file, see below: --- DRIVERPAGEFAULTBEYONDENDOFALLOCATION d6 N bytes of memory was allocated and more than N bytes are being referenced. This cannot be protected by try-except. When...

Microsoft Windows Kernel - 'ATMFD.DLL' Out-of-Bounds Read due to Malformed Name INDEX in the CFF Table

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1213 We have encountered a Windows kernel crash in the ATMFD.DLL OpenType driver while processing a corrupted OTF font file, see below: --- DRIVERPAGEFAULTBEYONDENDOFALLOCATION d6 N bytes of memory was allocated and more than N byt...

Microsoft Windows Kernel - ATMFD.DLL Out-of-Bounds Read due to Malformed Name INDEX in the CFF Table

Microsoft Windows Kernel - ATMFD.DLL Out-of-Bounds Read due to Malformed Name INDEX in the CFF Table Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1213 We have encountered a Windows kernel crash in the ATMFD.DLL OpenType driver while processing a corrupted OTF font file, see...

Microsoft Windows ATMFD.dll Information Disclosure Vulnerability

Microsoft Windows is the popular computer operating system. An information disclosure vulnerability exists in Microsoft Windows ATMFD.dll, which can be exploited by attackers to obtain sensitive information...

CVE-2017-0192

The CVE-2017-0192 entry describes an information disclosure in the Microsoft Windows ATMFD.dll (Adobe Type Manager Font Driver). Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 bui...

Microsoft Windows 'ATMFD.dll' Information Disclosure Vulnerability (KB4015380)

This host is missing an important security update according to Microsoft KB4015380. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Microsoft Windows Multiple Vulnerabilities (KB4015583)

This host is missing an important security update according to Microsoft security update KB4015067. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

KB4015380: Security Update for the ATMFD.dll Information Disclosure Vulnerability (April 2017)

The remote Windows host is missing security update KB4015380. It is, therefore, affected by an information disclosure vulnerability in the Adobe Type Manager Font Driver ATMFD.dll due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this, by convincing a...

Security update for the ATMFD.dll information disclosure vulnerability in Windows Vista and Windows Server 2008: April 11, 2017

Security update for the ATMFD.dll information disclosure vulnerability in Windows Vista and Windows Server 2008: April 11, 2017 Summary To learn more about the vulnerability, go to CVE-2017-0192. More Information Important If you install a language pack after you install this update, you must...

Microsoft ATMFD.dll Information Disclosure (CVE-2017-0192)

An information disclosure vulnerability exists in Adobe Type Manager Font Driver ATMFD.dll. The vulnerability is caused when the Adobe Type Manager Font Driver ATMFD.dll improperly handles objects in memory. An attacker can exploit this vulnerability by enticing a user to open a specially crafted...