105 matches found
Microsoft Windows Server 2003 OpenType Font Engine DoS Vulnerability
Windows Server 2003 operating system is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2009-3020
win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service system crash by referencing a crafted .eot file in the src descriptor of an @font-face Cascading Style Sheets CSS rule in an HTML document, possibly related to the Embedded OpenType EOT Font Engin...
Design/Logic Flaw
win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service system crash by referencing a crafted .eot file in the src descriptor of an @font-face Cascading Style Sheets CSS rule in an HTML document, possibly related to the Embedded OpenType EOT Font Engin...
CVE-2009-3020
CVE-2009-3020 refers to a denial-of-service vulnerability in Windows Server 2003 SP2 via win32k.sys/Embedded OpenType Font Engine. The issue arises when a crafted .eot font is referenced in the src descriptor of an @font-face CSS rule in an HTML document, potentially allowing a remote attacker to...
MS Windows 2003 (EOT File) BSOD Crash Exploit
No description provided by source. MS Windows 2003 EOT File BSOD Crash Exploit author: webDEViL http://milw0rm.com/sploits/2009-wwbsod.zip http://sebug.net/local/2009-exploits/0908-exploits/2009-wwbsod.zip...
Microsoft Windows Server 2003 - .EOT Blue Screen of Death Crash
Microsoft Windows Server 2003 - .EOT Blue Screen of Death Crash MS Windows 2003 EOT File BSOD Crash Exploit author: webDEViL https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/9417.zip 2009-wwbsod.zip milw0rm.com 2009-08-11...
MS Windows 2003 (EOT File) BSOD Crash Exploit
Exploit for unknown platform in category dos / poc ============================================= MS Windows 2003 EOT File BSOD Crash Exploit ============================================= MS Windows 2003 EOT File BSOD Crash Exploit author: webDEViL http://inj3ct0r.com/sploits/6962.zip 0day.today...
Microsoft Windows Server 2003 - '.EOT' Blue Screen of Death Crash
MS Windows 2003 EOT File BSOD Crash Exploit author: webDEViL https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/9417.zip 2009-wwbsod.zip milw0rm.com 2009-08-11...
CVE-2009-0231
The Embedded OpenType EOT Font Engine T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers an integer truncation...
CVE-2009-0232
Integer overflow in the Embedded OpenType EOT Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table, aka "Embedded OpenType Font Integer Overflow...
Heap overflow
The Embedded OpenType EOT Font Engine T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers an integer truncation...
Integer overflow
Integer overflow in the Embedded OpenType EOT Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table, aka "Embedded OpenType Font Integer Overflow...
CVE-2009-0232
Integer overflow in the Embedded OpenType EOT Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table, aka "Embedded OpenType Font Integer Overflow...
CVE-2009-0231
The Embedded OpenType EOT Font Engine T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers an integer truncation...
CVE-2009-0232
CVE-2009-0232: A remote-code-execution vulnerability in the Embedded OpenType (EOT) Font Engine. An integer overflow occurs while parsing EOT name tables, affecting Windows 2000 SP4; XP SP2/SP3; Server 2003 SP2; Vista SP1/SP2; and Server 2008 Gold/SP2. An attacker could exploit this via a crafted...
CVE-2009-0231
CVE-2009-0231 concerns a heap-based overflow in the Embedded OpenType Font Engine (T2EMBED.DLL) used by Microsoft Windows. The vulnerability stems from an integer truncation while processing OpenType font records, allowing remote attackers to execute arbitrary code by delivering a crafted EOT/Ope...
Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities (961371)
This host is missing a critical security update according to Microsoft Bulletin MS09-029. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Security Bulletin MS09-029 - Critical Vulnerabilities in the Embedded OpenType Font Engine Could Allow Remote Code Execution (961371)
Microsoft Security Bulletin MS09-029 - Critical Vulnerabilities in the Embedded OpenType Font Engine Could Allow Remote Code Execution 961371 Published: July 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in a...
Microsoft Windows嵌入Web字体堆溢出漏洞（MS06-002）
Microsoft Windows是微软发布的非常流行的操作系统。 Windows解压嵌入开放类型（EOT）字体的方式存在漏洞，攻击者可能利用此漏洞在机器上执行任意指令。 Internet Explorer在处理EOT字体时会调用T2EMBED.DLL。EOT文件中的数据是以Agfa MicroType Express格式压缩的，其LZ压缩的流包含有24位分配空间。这个空间大小 + 1C00h被分配到了MTXLZCOMPUnPackMemory函数中，但在将数据拷贝到块中之前却没有验证所生成分配空间的大小，这就允许畸形的EOT文件用二进制数据导致任意长度的堆溢出。 Microsoft...
