Adobe Digital Editions嵌入式字体处理内存破坏漏洞(CVE-2013-1377)

BUGTRAQ ID: 61528 CVECAN ID: CVE-2013-1377 Adobe Digital Editions是阅读和管理电子书及其他数字出版物的软件，支持工业标准电子书格式，例如PDF/A、EPUB。 Adobe Digital Editions 2.0.67532的rmsdkwrapper.dll模块会在处理嵌入字体流的CVT程序表时出错，攻击者通过PDF文件内的特制字体流，利用此漏洞可破坏内存。 0 Adobe Digital Editions 2.0.67532 厂商补丁： Adobe -----...

[SECURITY] Fedora 18 Update: fontmatrix-0.9.99-9.r1218.fc18

A powerful and well designed fonts manager...

OpenJDK: Resource denial of service (AWT, 8001038)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the...

Oracle Linux 3 : freetype (ELSA-2010-0736)

From Red Hat Security Advisory 2010:0736 : Updated freetype packages that fix three security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

Oracle Linux 6 : freetype (ELSA-2011-1085)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1085 advisory. - Add freetype-2.3.11-CVE-2011-0226.patch Add better argument check for 'callothersubr'. - based on patches by Werner Lemberg, Alexei Podtelezhnikov and Matthia...

Oracle Linux 5 / 6 : pango (ELSA-2011-0180)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0180 advisory. - Prevent heap corruption with malformed fonts. CVE-2011-0020 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 4 : xorg-x11 (ELSA-2007-0126)

From Red Hat Security Advisory 2007:0126 : Updated X.org packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. X.org is an open source implementation of the ...

Oracle Linux 6 : java-1.6.0-openjdk (ELSA-2012-0729)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0729 advisory. 1:1.6.0.0-1.48.1.11.3 - Access gnome bridge jar is forced to have 644 permissions - Resolves: rhbz828751 1:1.6.0.0-1.47.1.11.3 - Modified patch3,...

Oracle Linux 4 : freetype (ELSA-2011-1161)

From Red Hat Security Advisory 2011:1161 : Updated freetype packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

Oracle Linux 3 / 4 : freetype (ELSA-2007-0150)

From Red Hat Security Advisory 2007:0150 : Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable...

Oracle Linux 4 : xorg-x11 (ELSA-2007-0519)

From Red Hat Security Advisory 2007:0519 : Updated X.org packages that correct a flaw in the way the X.Org X11 xfs font server starts are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. X.org is an...

Oracle Linux 3 : freetype (ELSA-2010-0577)

From Red Hat Security Advisory 2010:0577 : Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base score...

Oracle Linux 4 : tetex (ELSA-2007-1027)

From Red Hat Security Advisory 2007:1027 : Updated tetex packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX...

Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2013-0751)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0751 advisory. 1.7.0.19-2.3.9.1.0.1.el64 - Update DISTRONAME in specfile 1.7.0.19-2.3.9.1.el6 - updated to updated IcedTea 2.3.9 with fix to one of security fixes -...

Oracle Linux 5 / 6 : freetype (ELSA-2013-0216)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0216 advisory. - Fix CVE-2012-5669 Use correct array size for checking 'glyphenc' - Add freetype-2.3.11-CVE-2011-3439.patch Various loading fixes. - Add...

Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2013-0752)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0752 advisory. 1.7.0.19-2.3.9.1.0.1.el59 - Add oracle-enterprise.patch - Fix DISTRONAME to Enterprise Linux 1.7.0.19-2.3.9.1.el5 - updated to updated IcedTea 2.3.9 wi...

Oracle Linux 4 : gpdf (ELSA-2009-1681)

From Red Hat Security Advisory 2009:1681 : An updated gpdf package that fixes a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. GPdf is a viewer for Portable Document Format PDF...

TrueType Font Exploits Gateway to Kernel Attacks

Font-parsing vulnerabilities weren’t part of the security consciousness much until the discovery of Duqu at the end of 2011. The spy malware hooked into the Windows kernel through bugs in the TrueType font file parsing engine, and not only breathed new life into the concept of cyber espionage, bu...

Adobe Acrobat Multiple Vulnerabilities April-2012 (Mac OS X)

This host is installed with Adobe Acrobat and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeacrobatmultvulnapr12macosx.nasl 6093 2017-05-10 09:03:18Z teissa $ Adobe Acrobat Multiple Vulnerabilities April-2012 Mac OS X Authors: Thanga Prakash S Copyright: Copyright c...

Microsoft Silverlight Remote Code Execution Vulnerabilities (2861561)

This host is missing a critical security update according to Microsoft Bulletin MS13-052. OpenVAS Vulnerability Test $Id: secpodsilverlightms13-052.nasl 8190 2017-12-20 09:44:30Z cfischer $ Microsoft Silverlight Remote Code Execution Vulnerabilities 2861561 Authors: Antu Sanadi Copyright: Copyrig...