Lucene search
K

39 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-12082

Malware in sbrugna...

9.3CVSS8.6AI score0.02251EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2010-3986

Malware in sbrugna...

6.8CVSS6.2AI score0.01314EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 3:57 a.m.6 views

CVE-2023-35177

Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser...

8.8CVSS7.3AI score0.00305EPSS
Exploits0
Prion
Prion
added 2023/06/30 4:15 p.m.20 views

Stack overflow

Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser...

5.8CVSS8.8AI score0.00305EPSS
Exploits0References1Affected Software38
Vulnrichment
Vulnrichment
added 2023/06/30 3:51 p.m.6 views

CVE-2023-35177

Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser...

7.3AI score0.00305EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:59 a.m.2 views

SUSE CVE-2010-1797

Multiple stack-based buffer overflows in the cffdecoderparsecharstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute...

9.3CVSS7.8AI score0.5972EPSS
Exploits7References8
Veracode
Veracode
added 2020/04/10 12:47 a.m.34 views

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. Two stack overflow flaws were found in the way the FreeType font engineprocessed certain Compact Font Format CFF character strings opcodes. If a user loaded a specially-crafted font file with an application linked against FreeType, it could caus...

9.3CVSS3.3AI score0.5972EPSS
Exploits7References24Affected Software1
NVD
NVD
added 2017/01/11 4:59 a.m.14 views

CVE-2017-2941

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution...

9.3CVSS7.9AI score0.02251EPSS
Exploits0References4
OSV
OSV
added 2017/01/11 4:59 a.m.1 views

CVE-2017-2941

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution...

7.8CVSS6AI score0.02251EPSS
Exploits0References4
AlpineLinux
AlpineLinux
added 2017/01/11 4:40 a.m.1 views

CVE-2017-2941

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution...

9.3CVSS8AI score0.02251EPSS
Exploits0References4
Cvelist
Cvelist
added 2017/01/11 4:40 a.m.20 views

CVE-2017-2941

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution...

9AI score0.02251EPSS
Exploits0References4
Microsoft KB
Microsoft KB
added 2017/01/07 12:0 a.m.29 views

MS11-032: Vulnerability in the OpenType Compact Font Format (CFF) driver could allow remote code execution: April 12, 2011

MS11-032: Vulnerability in the OpenType Compact Font Format CFF driver could allow remote code execution: April 12, 2011 Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack...

7.1AI score
Exploits0
OSV
OSV
added 2015/02/08 12:0 a.m.0 views

UBUNTU-CVE-2014-9659

cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow via a crafted OpenType font. NOTE: this...

7.5CVSS7.6AI score0.02849EPSS
Exploits2References3
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.38 views

Foxit Reader <= 4.0 pdf Jailbreak Exploit

No description provided by source. import sys,zlib def getFFShellcodesc: ffsc = '' if lensc%4 != 0: sc += 4-lensc%4'\x00' for i in range0,lensc,4: ffsc += '\xff'+sci+3+sci+2+sci+1+sci return ffsc outputHeader = ''' FreeType Compact Font Format CFF Multiple Stack Based Buffer Overflow CVE-2010-179...

9.3CVSS0.5972EPSS
Exploits7
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.42 views

Scientific Linux Security Update : freetype on SL3.x, SL4.x, SL5.x i386/x86_64

Two stack overflow flaws were found in the way the FreeType font engine processed certain Compact Font Format CFF character strings opcodes. If a user loaded a specially crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute...

9.3CVSS5.9AI score0.5972EPSS
Exploits7References2
OpenVAS
OpenVAS
added 2011/08/09 12:0 a.m.26 views

CentOS Update for freetype CESA-2010:0607 centos5 i386

Check for the Version of freetype OpenVAS Vulnerability Test CentOS Update for freetype CESA-2010:0607 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

9.3CVSS0.3AI score0.5972EPSS
Exploits7References2
OpenVAS
OpenVAS
added 2011/04/13 12:0 a.m.32 views

Windows OpenType Compact Font Format (CFF) Driver Remote Code Execution Vulnerability (2507618)

This host is missing a critical security update according to Microsoft Bulletin MS11-032. OpenVAS Vulnerability Test $Id: secpodms11-032.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows OpenType Compact Font Format CFF Driver Remote Code Execution Vulnerability 2507618 Authors: Madhuri D Copyright:...

9.3CVSS0.9AI score0.56688EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2011/04/13 12:0 a.m.30 views

Windows OpenType Compact Font Format (CFF) Driver Remote Code Execution Vulnerability (2507618)

This host is missing a critical security update according to Microsoft Bulletin MS11-032. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5AI score0.56688EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2011/02/09 12:0 a.m.21 views

Vulnerability in the OpenType Compact Font Format (CFF) Driver Could Allow Remote Code Execution (2485376)

This host is missing a critical security update according to Microsoft Bulletin MS11-007. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5.1AI score0.22056EPSS
Exploits0References3
Symantec
Symantec
added 2011/02/08 12:0 a.m.15 views

Microsoft Windows OpenType Compact Font Format Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the OpenType Compact Font Format CFF driver. An attacker can exploit this issue to execute arbitrary code in kernel mode. Successful exploits will completely compromise an affected computer. Failed attemp...

7.9AI score
Exploits0References1Affected Software13
Rows per page
Query Builder