CVE-2011-3437

CVE-2011-3437 affects Apple OS X 10.7 prior to 10.7.2, caused by an ATS (Apple Type Services) signedness error in handling Type 1 fonts. A crafted embedded Type 1 font in a document can lead to remote arbitrary code execution. The vulnerability impact is described as arbitrary code execution with...

CVE-2011-3256

FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font, a different vulnerability than CVE-2011-0226...

CVE-2011-3256

FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font, a different vulnerability than CVE-2011-0226...

CVE-2011-2002

win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle TrueType fonts, which allows local users to cause a denial of service system hang via a crafted font file, aka "Win32k TrueType Font...

Buffer overflow

Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon file, aka "Font Librar...

Type confusion

win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle TrueType fonts, which allows local users to cause a denial of service system hang via a crafted font file, aka "Win32k TrueType Font...

CVE-2011-2003

Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon file, aka "Font Librar...

CVE-2011-2002

CVE-2011-2002 affects the Windows kernel32k driver (win32k.sys) on Windows Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1. The vulnerability stems from improper handling of TrueType font files in kernel-mode; a crafted font can cause a denial of service (system hang) locally. Affected component...

CVE-2011-2003

CVE-2011-2003 : A buffer overflow in win32k.sys used by kernel-mode drivers across multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 RTM/SP1) can be triggered by a crafted .fon file. The vulnerability arises from an input validation error when the ke...

Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2567053)

This host is missing an important security update according to Microsoft Bulletin MS11-077. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2567053)

This host is missing an important security update according to Microsoft Bulletin MS11-077. OpenVAS Vulnerability Test $Id: secpodms11-077.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities 2567053 Authors: Antu Sanadi Copyright: Copyright c 201...

Microsoft Windows Kernel .fon字体文件远程代码执行漏洞(MS11-077)

BUGTRAQ ID: 49975 CVE ID: CVE-2011-2003 Microsoft Windows是流行的计算机操作系统。 IWindows Kernel在.fon字体文件的处理上存在远程代码执行漏洞，远程攻击者可利用此漏洞以内核权限执行任意代码，导致完全控制受影响计算机。 Microsoft Windows XP Microsoft Windows Server Microsoft Vista Microsoft Windows 7 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS11-077）以及相应补丁:...

Microsoft Windows Kernel Win32k.sys TrueType字体文件远程拒绝服务漏洞(MS11-077)

BUGTRAQ ID: 49973 CVE ID: CVE-2011-2002 Microsoft Windows是流行的计算机操作系统。 Windows Kernel Win32k.sys在TrueType字体文件的处理上存在远程拒绝服务漏洞，远程攻击者可利用此漏洞使内核崩溃，拒绝服务合法用户。 Microsoft Windows XP Microsoft Windows Server Microsoft Vista Microsoft Windows 7 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS11-077）以及相应补丁:...

MS11-077: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2567053)

The remote host is running a version of the Windows kernel that is affected by the following vulnerabilities : - A NULL pointer deference that could allow privilege escalation. CVE-2011-1985 - A DoS caused by processing a specially crafted TrueType font file. CVE-2011-2002 - A code execution...

Microsoft Windows Kernel 'Win32k.sys' TrueType Font File Remote Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. A remote attacker can exploit this issue to crash the Windows kernel, denying service to legitimate users. Technologies Affected Avaya Aura Conferencing 6.0 Standard Avaya CallPilot 4.0 Avaya CallPilot 5.0 Avaya...

Windows font library file buffer overflow

Overview Microsoft Windows contains a buffer overflow vulnerability in the handling of font library files, which may allow a remote, unauthenticated attacker to execute arbitrary code with kernel privileges. Description Microsoft Windows supports a variety of font formats. One of which is the fon...

Microsoft Windows Kernel '.fon' Font File Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a malformed file on a remote network share. Successful exploits can allow attackers to execute arbitrary code with kernel-level...

Preemptive Protection against Microsoft Windows Kernel Font Library File Buffer Overrun (MS11-077; CVE-2011-2003)

A buffer overflow vulnerability has been reported in Microsoft Windows kernel...

PT-2011-3541 · Microsoft · Windows +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: A denial of service issue exists due to improper handling of TrueType fonts. This could allow local users to cause a system hang via a crafted font file. An attacker who...

PT-2011-3542 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: A...