CVE-2011-0226

Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted...

freetype2 -- execute arbitrary code or cause denial of service

Vincent Danen reports: Due to an error within the t1decoderparsecharstrings function src/psaux/t1decode.c and can be exploited to corrupt memory by tricking a user into processing a specially-crafted postscript Type1 font in an application that uses the freetype library...

CVE-2011-0226

Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted...

Apple PDF Viewer TTF Embedded Jailbreak Code Execution

An elevation of privilege vulnerability has been reported in Apple PDF Viewer. The vulnerability is due to an error in the PDF Viewer when handling PDF files that contain TrueType font TTF, early reported when using Apple mobile devices iPhone/iPad/iPod. A remote attacker could trigger this flaw...

Opera Browser 'SRC' Denial of Service Vulnerability - Windows

Opera browser is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Uniscribe Font Parsing Engine Remote Code Excution (MS10-063; CVE-2010-2738)

This is a memory corruption vulnerability in Microsoft Windows and Microsoft Office products. The vulnerability is due to improper input validation of a table in the TrueType font layout. Remote attacker could trigger this flaw by enticing a user to open a specially crafted TTF file. Successful...

Opera Browser 'SRC' Denial of Service Vulnerability (Windows)

The host is installed with Opera browser and is prone to denial of service Vulnerability. OpenVAS Vulnerability Test $Id: gboperasrciframedosvulnwin.nasl 7029 2017-08-31 11:51:40Z teissa $ Opera Browser 'SRC' Denial of Service Vulnerability Windows Authors: Madhuri D Copyright: Copyright c 2011...

CVE-2011-2641

Opera 11.11 allows remote attackers to cause a denial of service application crash by setting the FACE attribute of a FONT element within an IFRAME element after changing the SRC attribute of this IFRAME element to an about:blank value...

Google Chrome Multiple Vulnerabilities (Jun 2011) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Multiple Vulnerabilities (Windows) - June 11

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnwinjun11.nasl 7019 2017-08-29 11:51:27Z teissa $ Google Chrome Multiple Vulnerabilities Windows - June 11 Authors: Madhuri D Copyright: Copyright c 2011...

Google Chrome < 12.0.742.112 Multiple Vulnerabilities

Binary data 5970.pasl...

Stable Channel Update

The Chrome Stable channel has been updated to 12.0.742.112 for all platforms. This release contains an updated version of Adobe Flash, along with the security fixes noted below. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be...

CVE-2011-1908

Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0.0619 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font in a PDF document...

CVE-2011-0198

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code via a crafted embedded TrueType font...

CVE-2011-0202

Integer overflow in CoreGraphics in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted embedded Type 1 font in a PDF document...

Integer overflow

Integer overflow in CoreGraphics in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted embedded Type 1 font in a PDF document...

Integer overflow

Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0.0619 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font in a PDF document...

Heap overflow

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code via a crafted embedded TrueType font...

CVE-2011-0202

Integer overflow in CoreGraphics in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted embedded Type 1 font in a PDF document...

CVE-2011-0198

CVE-2011-0198: Heap-based buffer overflow in Apple Type Services (ATS) on Mac OS X before 10.6.8. A remote attacker could exploit a crafted embedded TrueType font to execute arbitrary code. Affected product: Mac OS X (pre-10.6.8). Impact: remote code execution with partial confidentiality/integri...