CVE-2010-4259

Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long CHARSETREGISTRY header in a BDF font file...

CVE-2010-4259

Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long CHARSETREGISTRY header in a BDF font file...

CVE-2010-4259

FontForge 20100501 is vulnerable to a stack-based buffer overflow triggered by a crafted CHARSET_REGISTRY header in a BDF font file, potentially allowing remote code execution or a denial of service. Public advisories confirm the issue and provide patches/upgrades: Debian DSA-2253-1 recommends up...

Debian DSA-2105-1 : freetype - several vulnerabilities

Several vulnerabilities have been discovered in the FreeType font library. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-1797 Multiple stack-based buffer overflows in the cffdecoderparsecharstrings function in the CFF Type2 CharStrings interpreter...

CVE-2010-3053

bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service application crash via a crafted BDF font file, related to an attempted modification of a value in a static string...

CVE-2010-3053

bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service application crash via a crafted BDF font file, related to an attempted modification of a value in a static string...

Design/Logic Flaw

bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service application crash via a crafted BDF font file, related to an attempted modification of a value in a static string...

CVE-2010-3053

bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service application crash via a crafted BDF font file, related to an attempted modification of a value in a static string...

CVE-2010-3053

bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service application crash via a crafted BDF font file, related to an attempted modification of a value in a static string...

CVE-2010-3053

CVE-2010-3053 affects FreeType (bdf/bdflib.c). A crafted BDF font can cause an application crash due to an error in modifying a value in a static string during BDF parsing, per the description. Root cause: insecure handling in the BDF font loader leading to a crash/DoS. Impact: denial of service ...

Ubuntu Update for freetype, libxfont, xorg, xorg-server vulnerabilities USN-448-1

Ubuntu Update for Linux kernel vulnerabilities USN-448-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4481.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for freetype, libxfont, xorg, xorg-server vulnerabilities USN-448-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone...

openSUSE 10 Security Update : freetype2 (freetype2-3066)

This update of freetype2 fixes an integer overflow in the BDF font parsing code. This bug can be exploited only with user assistance to potentially execute arbitrary code. CVE-2007-1351 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

GLSA-200705-10 : LibXfont, TightVNC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200705-10 LibXfont, TightVNC: Multiple vulnerabilities The libXfont code is prone to several integer overflows, in functions ProcXCMiscGetXIDList, bdfReadCharacters and FontFileInitTable. TightVNC contains a local copy of this cod...

LibXfont, TightVNC: Multiple vulnerabilities

Background LibXfont is the X.Org font library. TightVNC is a VNC client/server for X displays. Description The libXfont code is prone to several integer overflows, in functions ProcXCMiscGetXIDList, bdfReadCharacters and FontFileInitTable. TightVNC contains a local copy of this code and is also...

FreeType: User-assisted execution of arbitrary code

Background FreeType is a True Type Font rendering library. Description Greg MacManus of iDefense Labs has discovered an integer overflow in the function bdfReadCharacters when parsing BDF fonts. Impact A remote attacker could entice a user to use a specially crafted BDF font, possibly resulting i...

RHEL 3 / 4 / 5 : freetype (RHSA-2007:0150)

Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine. An integer overflow flaw was...

freetype security update

CentOS Errata and Security Advisory CESA-2007:0150 Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality,...

CVE-2005-0577

Format string vulnerability in DNA MKBold-MKItalic 0.061 and earlier allows remote attackers to execute arbitrary code via crafted BDF font files...

CVE-2005-0577

Format string vulnerability in DNA MKBold-MKItalic 0.061 and earlier allows remote attackers to execute arbitrary code via crafted BDF font files...

CVE-2005-0577

CVE-2005-0577 affects DNA MKBold-MKItalic up to version 0.06_1. The vulnerability is a format string flaw in the BDF font processing that could allow remote code execution. The OpenVAS and NVD records corroborate the issue; they reference the FreeBSD ports mkbold-mkitalic package as affected. The...