Lucene search
K

14 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 6:13 a.m.1 views

SUSE CVE-2007-0455

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font...

7.5CVSS8AI score0.05488EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:51 a.m.1 views

SUSE CVE-2011-3099

Use-after-free vulnerability in the PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a malformed name for the font encoding...

10CVSS7.2AI score0.04004EPSS
Exploits0References3
OSV
OSV
added 2017/12/09 6:29 a.m.2 views

CVE-2017-16415

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer;...

8.8CVSS6AI score0.11586EPSS
Exploits0References3
NVD
NVD
added 2017/12/09 6:29 a.m.13 views

CVE-2017-16415

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer;...

9.3CVSS9.1AI score0.11586EPSS
Exploits0References3
seebug.org
seebug.org
added 2017/09/21 12:0 a.m.32 views

Iceni Argus PDF Font-Encoding GlyphMap Adjustment Code Execution Vulnerability(CVE-2016-8388)

Summary An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write the font's name to a single object within an array of objects. Due to ...

9.3CVSS7.8AI score0.00129EPSS
Exploits2
CNVD
CNVD
added 2017/07/27 12:0 a.m.2 views

Artifex Ghostscript GhostXPS heap buffer overflow vulnerability (CNVD-2017-22389)

Artifex Ghostscript is an open source PostScript a page description language and programming language for the electronics industry and desktop publishing parser from Artifex Software. Artifex Ghostscript A security vulnerability exists in the 'xpsselectfontencoding' function of the xps/xpsfont.c...

7.8CVSS7.7AI score0.00667EPSS
Exploits1References1
Talos
Talos
added 2017/02/27 12:0 a.m.39 views

Iceni Argus PDF Font-Encoding GlyphMap Adjustment Code Execution Vulnerability

Summary An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write the font’s name to a single object within an array of objects. Due to ...

9.3CVSS8AI score0.00129EPSS
Exploits2
NVD
NVD
added 2012/05/16 12:55 a.m.15 views

CVE-2011-3099

Use-after-free vulnerability in the PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a malformed name for the font encoding...

10CVSS7AI score0.04004EPSS
Exploits0References6
Prion
Prion
added 2012/05/16 12:55 a.m.15 views

Design/Logic Flaw

Use-after-free vulnerability in the PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a malformed name for the font encoding...

10CVSS7.6AI score0.04004EPSS
Exploits0References6Affected Software1
UbuntuCve
UbuntuCve
added 2012/05/16 12:55 a.m.16 views

CVE-2011-3099

Use-after-free vulnerability in the PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a malformed name for the font encoding...

10CVSS6AI score0.04004EPSS
Exploits0References2
CVE
CVE
added 2012/05/16 12:0 a.m.57 views

CVE-2011-3099

The CVE-2011-3099 entry concerns Google Chrome (prior to version 19.0.1084.46). The vulnerability is a use-after-free in Chrome’s PDF functionality triggered by a malformed font-encoding name, enabling a remote attacker to cause a denial-of-service or potentially other impact. Affected component ...

10CVSS7.1AI score0.04004EPSS
Exploits0References6Affected Software1
Debian CVE
Debian CVE
added 2012/05/16 12:0 a.m.18 views

CVE-2011-3099

Removed by vendor...

10CVSS6.7AI score0.04004EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2010/10/04 5:49 p.m.2 views

freetype: DoS via nested "seac" calls

Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character aka seac calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c...

5CVSS5.9AI score0.03893EPSS
Exploits0References4
OSV
OSV
added 2008/01/18 11:0 p.m.1 views

DEBIAN-CVE-2008-0006

Buffer overflow in 1 X.Org Xserver before 1.4.1, and 2 the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCFBDFENCODINGS...

7.5CVSS9.5AI score0.23908EPSS
Exploits0References1
Rows per page
Query Builder