CVE-2022-23318

A heap-buffer-overflow in pcf2bdf, versions = 1.05 allows an attacker to trigger unsafe memory access via a specially crafted PCF font file. This out-of-bound read may lead to an application crash, information disclosure via program memory or other context-dependent impact...

CVE-2022-23318

The CVE-2022-23318 entry concerns a heap-buffer-overflow in pcf2bdf, affecting versions >= 1.05. The cited issue allows an attacker to trigger unsafe memory access by using a specially crafted PCF font file, leading to an out-of-bounds read that may crash the application and potentially disclo...

This New Tool Can Retrieve Pixelated Text from Redacted Documents

The practice of blurring out text using a method called pixelation may not be as secure as previously thought. While the most foolproof way of concealing sensitive textual information is to use opaque black bars, other redaction methods like pixelation can achieve the opposite effect, enabling th...

PT-2022-15926 · Pcf2Bdf +1 · Pcf2Bdf +1

Name of the Vulnerable Software and Affected Versions: pcf2bdf versions 1.05 and later Description: A segmentation fault during PCF file parsing allows an attacker to trigger a program crash via a specially crafted PCF font file. This crash affects the availability of the software and dependent...

Pcf2bdf 资源管理错误漏洞

Pcf2bdf is a font decompiler by the Japanese individual developer Nayuta Taga. It is used to convert X fonts from a portable compiled format to a bitmap distribution format. pcf2bdf suffers from a resource management error vulnerability that allows an attacker to trigger a program crash via a...

pcf2bdf 安全漏洞

Pcf2bdf is a font decompiler by the Japanese individual developer Nayuta Taga. It is used to convert X fonts from a portable compiled format to a bitmap distribution format. A buffer error vulnerability exists in pcf2bdf, which allows an attacker to trigger an unsafe memory access via a specially...

Apple macOS libFontParser TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the libFontParser library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

February 15, 2022—KB5010421 (OS Build 20348.558) Preview

None None...

The vulnerability of the FontParser component in operating systems such as iPadOS, watchOS, iOS, tvOS, and Mac OS allows a hacker to execute arbitrary code.

The vulnerability of the FontParser component in iPadOS, watchOS, iOS, tvOS, and Mac OS operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious fi...

Use Any Font < 6.2.1 - Unauthenticated Arbitrary CSS Appending

The plugin does not have any authorisation checks when assigning a font, allowing unauthenticated users to sent arbitrary CSS which will then be processed by the frontend for all users. Due to the lack of sanitisation and escaping in the backend, it could also lead to Stored XSS issues...

WordPress Use Any Font plugin <= 6.2 - Unauthenticated Arbitrary CSS Appending vulnerability

Unauthenticated Arbitrary CSS Appending vulnerability discovered by Krzysztof Zając in WordPress Use Any Font plugin versions = 6.2. Solution Update the WordPress Use Any Font plugin to the latest available version at least 6.2.1...

Use Any Font < 6.2.1 - Unauthenticated Arbitrary CSS Appending

The plugin does not have any authorisation checks when assigning a font, allowing unauthenticated users to sent arbitrary CSS which will then be processed by the frontend for all users. Due to the lack of sanitisation and escaping in the backend, it could also lead to Stored XSS issues PoC...

CVE-2022-22938

VMware Workstation 16.x prior to 16.2.2 and Horizon Client for Windows 5.x prior to 5.5.3 contains a denial-of-service vulnerability in the Cortado ThinPrint component. The issue exists in TrueType font parser. A malicious actor with access to a virtual machine or remote desktop may exploit this...

Denial of service

VMware Workstation 16.x prior to 16.2.2 and Horizon Client for Windows 5.x prior to 5.5.3 contains a denial-of-service vulnerability in the Cortado ThinPrint component. The issue exists in TrueType font parser. A malicious actor with access to a virtual machine or remote desktop may exploit this...

CVE-2022-22938

CVE-2022-22938 affects VMware Workstation 16.x (before 16.2.2) and Horizon Client for Windows 5.x (before 5.5.3). The vulnerability lies in the Cortado ThinPrint component’s TrueType font parser, allowing a local attacker with VM or remote desktop access to trigger a denial‑of‑service in the Thin...

CVE-2022-22938

VMware Workstation 16.x prior to 16.2.2 and Horizon Client for Windows 5.x prior to 5.5.3 contains a denial-of-service vulnerability in the Cortado ThinPrint component. The issue exists in TrueType font parser. A malicious actor with access to a virtual machine or remote desktop may exploit this...

Mageia: Security Advisory (MGASA-2021-0112)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0155)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2016-0129)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware Horizon View Client 5.x < 5.5.3 DoS (VMSA-2022-0002)

The version of VMware Horizon Client for Windows installed on the remote host is less than 5.5.3. It is, therefore, affected by a denial of service DoS vulnerability in the Cortado ThinPrint component's TrueType font parser. A local attacker can exploit this in order to cause the ThinPrint servic...