CVE-2019-1149

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data...

Windows Graphics Component Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

PT-2019-2999 · Microsoft · Windows Gdi +1

Name of the Vulnerable Software and Affected Versions: Windows GDI component affected versions not specified Description: An information disclosure issue exists due to the improper disclosure of the Windows GDI component's memory contents. This could allow an attacker to obtain information to...

PT-2019-2977 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling specially crafted embedded fonts in the Windows font library. Exploitation of this issue could allow a remote attacker to execute arbitrary code a...

PT-2019-3255 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A remote code execution issue exists due to the improper handling of specially crafted embedded fonts by the Windows font library. This could allow an attacker to take control of the affect...

The vulnerability of the LibreLogo software module of the LibreOffice office software package allows a hacker to execute arbitrary code on the target system.

The vulnerability of the LibreLogo software module of the LibreOffice office software package exists due to the presence of mechanisms within LibreLogo that execute programming algorithms in Python when the cursor is placed over a malicious object. Exploiting this vulnerability allows a malicious...

The vulnerability of the Windows GDI component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially crafted document or web page...

The vulnerability of the DirectWrite programming interface in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the DirectWrite programming interface in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created web page or document...

The vulnerability of the DirectWrite programming interface in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the DirectWrite programming interface in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created web page or document...

The vulnerability of the DirectWrite programming interface in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the DirectWrite programming interface in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created web page or document...

The vulnerability of the DirectWrite programming interface in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the DirectWrite programming interface in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created web page or document...

PT-2019-3944

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory in the DirectWrite application programming interface of Windows operating systems. This can allow a remote attacker to gain...

The vulnerability of the SplashClip::clipAALine function in the Poppler PDF viewer library allows a attacker to trigger a service failure.

The vulnerability of the SplashClip::clipAALine function splash/SplashClip.cc in the Poppler PDF display library is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially crafted PDF document...

UBUNTU-CVE-2019-1010006

Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiffdocumentrend...

The vulnerability of the Speech API’s software interface for speech recognition and synthesis allows a perpetrator to execute arbitrary code.

The vulnerability of the Speech API SAPI software interface for speech recognition and synthesis on Windows operating systems is related to the way the Text-to-Speech system processes input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially...

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

UBUNTU-CVE-2019-13290

Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fzappenddisplaynode located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node...

UBUNTU-CVE-2019-13291

In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan located at Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Information Disclosure...

CVE-2019-13281

In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage in Stream.cc when writing to frameBuf memory. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows an attacker to use a crafted pdf file to cause Denial of...

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created document or web page...