Updated graphite2 packages fix security vulnerabilities

An out-of-bounds write triggered with a maliciously crafted Graphite font could lead to a crash or potentially code execution CVE-2017-5436. Multiple vulnerabilities have been found in the Graphite font rendering engine which might result in denial of service or the execution of arbitrary code if...

FontForge buffer overflow vulnerability (CNVD-2017-18538)

FontForge is an open source font editing tool that supports multiple languages. A buffer overflow vulnerability exists in ValidatePostScriptFontName in FontForge version 20161012. An attacker can exploit this vulnerability with a specially crafted otf file to cause a denial of service or execute...

FontForge buffer overflow vulnerability (CNVD-2017-18365)

FontForge is an open source font editing tool that supports multiple languages. A buffer overflow vulnerability exists in PSCharStringToSplines in FontForge version 20161012. An attacker can exploit this vulnerability to cause a denial of service or code execution with the help of a specially...

ImageMagick Denial of Service Vulnerability (CNVD-2017-18361)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'litefontmap' function in the coders/wmf.c file in ImageMagick version...

FontForge Buffer Overflow Vulnerability

FontForge is an open source font editing tool that supports multiple languages. A buffer overflow vulnerability exists in getsid in FontForge version 20161012. An attacker can exploit this vulnerability with a specially crafted otf file to cause a denial of service or code execution...

DEBIAN-CVE-2017-11568

FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines psread.c resulting in DoS or code execution via a crafted otf file...

UBUNTU-CVE-2017-11570

FontForge 20161012 is vulnerable to a buffer over-read in umodenc parsettf.c resulting in DoS or code execution via a crafted otf file...

DEBIAN-CVE-2017-11576

FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict parsettf.c resulting in DoS via a crafted otf file...

DEBIAN-CVE-2017-11574

FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset parsettf.c resulting in DoS or code execution via a crafted otf file...

DEBIAN-CVE-2017-11571

FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble parsettf.c resulting in DoS or code execution via a crafted otf file...

DEBIAN-CVE-2017-11569

FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights parsettf.c resulting in DoS or code execution via a crafted otf file...

DEBIAN-CVE-2017-11534

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the litefontmap function in coders/wmf.c...

UBUNTU-CVE-2017-11534

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the litefontmap function in coders/wmf.c...

UBUNTU-CVE-2017-11575

FontForge 20161012 is vulnerable to a buffer over-read in strnmatch char.c resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c...

UBUNTU-CVE-2017-11574

FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset parsettf.c resulting in DoS or code execution via a crafted otf file...

UBUNTU-CVE-2017-11576

FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict parsettf.c resulting in DoS via a crafted otf file...

UBUNTU-CVE-2017-11568

FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines psread.c resulting in DoS or code execution via a crafted otf file...

RHEL 7 : graphite2 (RHSA-2017:1793)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1793 advisory. Graphite2 is a project within SIL's Non-Roman Script Initiative and Language Software Development groups to provide rendering capabilities f...

Arabic Font - CSRF & Stored XSS

Due to a lack of CSRF mitigation and entity encoding in the output generated by arabic-font.php and /inc/panel.php, it is possible to store and execute scripts in the context of an admin user...

Arabic Font - CSRF & Stored XSS

Due to a lack of CSRF mitigation and entity encoding in the output generated by arabic-font.php and /inc/panel.php, it is possible to store and execute scripts in the context of an admin user. PoC...