Lucene search
+L

291 matches found

Symantec
Symantec
•added 2013/10/08 12:00 a.m.•63 views

Microsoft Windows TrueType Font CMAP Table CVE-2013-3894 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will result in the execution of arbitrary code in the kernel-mode. Failed attempts will cause a denial-of-service condition. Technologies Affected Avaya Aura Conferencing Standard Avaya CallPilot...

9.3CVSS7.3AI score0.43101EPSS
SaveExploits0References1Affected Software6
Zero Day Initiative
Zero Day Initiative
•added 2013/10/08 12:00 a.m.•54 views

Microsoft Windows TTF CMAP Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

9.3CVSS3.5AI score0.43101EPSS
SaveExploits0References1
OSV
OSV
•added 2013/03/09 11:55 a.m.•14 views

DEBIAN-CVE-2013-2495

The iffreadheader function in iff.c in libavformat in FFmpeg through 1.1.3 does not properly handle data sizes for Interchange File Format IFF data during operations involving a CMAP chunk or a video codec, which allows remote attackers to cause a denial of service integer overflow, out-of-bounds...

7.5CVSS7.2AI score0.01371EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2012/04/25 12:00 a.m.•31 views

OpenJPEG CMAP Record Parsing Vulnerability

This host is installed with OpenJPEG and is prone to record parsing vulnerability. OpenVAS Vulnerability Test $Id: secpodopenjpegcmaprecordparsingvuln.nasl 5912 2017-04-10 09:01:51Z teissa $ OpenJPEG CMAP Record Parsing Vulnerability Authors: Madhuri D Copyright: Copyright c 2012 SecPod,...

9.3CVSS0.5AI score0.05081EPSS
SaveExploits0References3
NVD
NVD
•added 2012/04/11 10:39 a.m.•21 views

CVE-2012-1499

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

9.3CVSS7.5AI score0.05081EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2012/04/11 10:39 a.m.•34 views

CVE-2012-1499

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

9.3CVSS7.5AI score0.05081EPSS
SaveExploits0References3
Prion
Prion
•added 2012/04/11 10:39 a.m.•24 views

Heap overflow

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

9.3CVSS8.1AI score0.05081EPSS
SaveExploits0References8Affected Software1
Mend
Mend
•added 2012/04/11 10:00 a.m.•5 views

CVE-2012-1499

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

9.3CVSS0.05081EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2012/04/11 12:00 a.m.•4 views

PT-2012-1138

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to 1.5 Description The issue allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption. This can lead to a violation of...

9.3CVSS0.05081EPSS
SaveExploits0References40
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/04/11 12:00 a.m.•7 views

CVE-2012-1499: Improper Restriction of Operations within the Bounds of a Memory Buffer

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

9.3CVSS6.7AI score0.05081EPSS
SaveExploits0References2
NVD
NVD
•added 2010/12/16 7:33 p.m.•32 views

CVE-2010-3959

The OpenType Font OTF driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted CMAP table in an OpenType font, aka "OpenType CMAP Table Vulnerability."...

6.9CVSS6.3AI score0.1436EPSS
SaveExploits0References4
Prion
Prion
•added 2010/12/16 7:33 p.m.•28 views

Design/Logic Flaw

The OpenType Font OTF driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted CMAP table in an OpenType font, aka "OpenType CMAP Table Vulnerability."...

6.9CVSS6.7AI score0.1436EPSS
SaveExploits0References4Affected Software3
Cvelist
Cvelist
•added 2010/12/16 7:00 p.m.•38 views

CVE-2010-3959

The OpenType Font OTF driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted CMAP table in an OpenType font, aka "OpenType CMAP Table Vulnerability."...

6.3AI score0.1436EPSS
SaveExploits0References4
CVE
CVE
•added 2010/12/16 7:00 p.m.•93 views

CVE-2010-3959

CVE-2010-3959 affects the Microsoft OpenType Font (OTF) driver. A crafted CMAP table in an OpenType font can cause local privilege escalation on Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2, Windows Server 2008 Gold/SP2/R2, and Windows 7. Root cause: incorrect handling/parsi...

6.9CVSS6.4AI score0.1436EPSS
SaveExploits0References4Affected Software6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/12/16 12:00 a.m.•6 views

CVE-2010-3959: Improper Control of Generation of Code

The OpenType Font OTF driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted CMAP table in an OpenType font, aka "OpenType CMAP Table Vulnerability."...

6.9CVSS5.8AI score0.1436EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2010/12/15 12:00 a.m.•47 views

MS10-091: Vulnerabilities in the OpenType Font (OTF) Driver Could Allow Remote Code Execution (2296199)

The remote Windows host contains a version of the OpenType Font OTF Format Driver that is affected by two vulnerabilities : - The driver does not properly index an array when parsing OpenType fonts, which could allow a remote attacker to run arbitrary code in kernel mode. CVE-2010-3956 - The driv...

9.3CVSS5.8AI score0.1436EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2010/12/15 12:00 a.m.•40 views

Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (2296199)

This host is missing an important security update according to Microsoft Bulletin MS10-091. OpenVAS Vulnerability Test $Id: secpodms10-091.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability 2296199 Authors: Veerendra GG...

9.3CVSS1AI score0.1436EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2010/12/15 12:00 a.m.•88 views

Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (2296199)

This host is missing an important security update according to Microsoft Bulletin MS10-091. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS4.9AI score0.1436EPSS
SaveExploits0References5
Check Point Advisories
Check Point Advisories
•added 2010/12/14 12:00 a.m.•24 views

Microsoft OpenType Font Format Driver CMAP Table Code Execution (MS10-091; CVE-2010-3959)

OpenType is a font format developed jointly by Microsoft and Adobe as an extension of Apple's TrueType font format. A remote code execution vulnerability has been reported in the way Microsoft Windows OpenType Font OTF format driver improperly parses specially crafted OpenType fonts. A remote...

6.9CVSS7.3AI score0.1436EPSS
SaveExploits0
securityvulns
securityvulns
•added 2009/03/02 12:00 a.m.•43 views

Hex Workshop buffer overflows

Buffer overflow on .cmap and .hex files parsing...

9.3CVSS3.6AI score0.05499EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder