Cross site scripting

PageLayer before 1.3.5 allows reflected XSS via the font-size parameter...

PageLayer 跨站脚本漏洞

PageLayer is a WordPress page builder plugin. It is very easy to use and lightweight on the browser. A cross-site scripting vulnerability exists in PageLayer versions prior to 1.3.5, which originates from a program that can fire XSS via the font size parameter...

Accusoft ImageGear buffer overflow vulnerability (CNVD-2021-40761)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A security vulnerability exists in ImageGear 19.9, which originates from a buffer overflow in the PDF process font function where a stack exists. An attacker can exploit the vulnerability to cause code...

The vulnerability of the Windows Graphics Component in Microsoft Windows operating systems, which allows attackers to exploit their privileges.

The vulnerability of the Windows Graphics Component in Microsoft Windows operating systems is related to incorrect handling of Font Entry objects. Exploiting this vulnerability can allow an attacker to increase their privileges...

Accusoft ImageGear 缓冲区错误漏洞

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A security vulnerability exists in ImageGear 19.9, which originates from a buffer overflow in the PDF process font function where a stack exists. An attacker can exploit the vulnerability to cause code...

PUB-A-179461812

In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

DEBIAN-CVE-2020-25668

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

VMware Workstation ThinPrint TTCHeader Integer Overflow Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

PT-2021-4729 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 14.6 Apple iOS versions prior to 14.6 Apple iPadOS versions prior to 14.6 Apple macOS versions prior to 11.4 Apple watchOS versions prior to 7.5 macOS Catalina versions prior to Security Update 2021-004 macOS Moja...

PT-2021-4676 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.4 tvOS versions prior to 14.6 watchOS versions prior to 7.5 iOS versions prior to 14.6 iPadOS versions prior to 14.6 Description: The issue is related to the processing of maliciously crafted fonts, which may result...

Apple macOS libFontParser OTF Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the GetFDIndex...

CVE-2021-24284

The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/uploads/kaswara/fontsicon directory with no checks for malicious files such as PHP...

WordPress plugin 代码问题漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A code issue vulnerability exists in Kaswara Modern VC...

Adobe Illustrator TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...

Microsoft Windows win32kfull Font Entry Use-After-Free Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Stack Consumption

xpdf is vulnerable to stack consumption. The vulnerability exists due to an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...

Denial Of Service (DoS)

Xpdf is vulnerable to denial of service. It is trying to use the freed t3GlyphStack-cache, which causes an heap-use-after-free problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to another char in the same Type 3 font...

Apple macOS 缓冲区错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in macOS, which arises from a boundary error when processing font files in the FontParser component. 10.14.4 18E226, 10.14.4 18E227, 10.14.5 18F132, 10.14.6 18G84, 10.14.6...

Apple macOS 竞争条件问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A vulnerability exists in macOS due to a competitive condition that originates in the FontParser component when processing font files. 10.14.4 18E226, 10.14.4 18E227, 10.14.5 18F132, 10.14.6 18G84, 10.14.6...

Apple iTunes 缓冲区错误漏洞

Apple iTunes is a suite of media player applications from Apple, Inc. that are used to play and manage digital music and video files. A buffer error vulnerability exists in versions prior to iTunes 12.11.3, which stems from a boundary condition in the CoreText component when handling specially...