SuSE 11.1 Security Update : evince (SAT Patch Number 3769)

Multiple font parser vulnerabilities in the DVI backend of evince have been fixed. CVE-2010-2640 - CVE-2010-2643 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 3693)

Mozilla Firefox 3.6 was updated to update 3.6.13 fixing several security issues. - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain...

Fedora 13 : java-1.6.0-openjdk-1.6.0.0-48.1.8.4.fc13 (2011-0500)

Wed Jan 5 2011 Jiri Vanek -1:1.6.0-47.1.8.4.48 - updated to icedtea 1.8.4 - Mon Nov 29 2010 Jiri Vanek -1:1.6.0-46.1.8.3.4 - Resolves: rhbz657491 - Removed Asian and Indic font dependencies. - Fri Nov 19 2010 Jiri Vanek -1:1.6.0-45.1.8.3 - updated to iced tea 1.8.3 - added fonts dependencies -...

Pango Font Parsing - pangoft2-render.c Heap Corruption

Pango Font Parsing - pangoft2-render.c Heap Corruption source: https://www.securityfocus.com/bid/45842/info Pango is prone to a remote heap-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempt...

Pango Font Parsing - 'pangoft2-render.c' Heap Corruption

source: https://www.securityfocus.com/bid/45842/info Pango is prone to a remote heap-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition...

Mandriva Update for evince MDVSA-2011:005 (evince)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Vulnerabilities in GDI Could Allow Remote Code Execution (925902)

This host is missing a critical security update according to Microsoft Bulletin MS07-017. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Vulnerabilities in GDI Could Allow Remote Code Execution (925902)

This host is missing a critical security update according to Microsoft Bulletin MS07-017. OpenVAS Vulnerability Test $Id: gbms07-017.nasl 5362 2017-02-20 12:46:39Z cfi $ Vulnerabilities in GDI Could Allow Remote Code Execution 925902 Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networ...

Ubuntu Update for evince vulnerabilities USN-1035-1

Ubuntu Update for Linux kernel vulnerabilities USN-1035-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10351.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for evince vulnerabilities USN-1035-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

CVE-2010-3311

Integer overflow in base/ftstream.c in libXft aka the X FreeType library in FreeType before 2.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Compact Font Format CFF font file that triggers a heap-based buffer overflow,...

DEBIAN-CVE-2010-3311

Integer overflow in base/ftstream.c in libXft aka the X FreeType library in FreeType before 2.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Compact Font Format CFF font file that triggers a heap-based buffer overflow,...

CVE-2010-3311

Integer overflow in base/ftstream.c in libXft aka the X FreeType library in FreeType before 2.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Compact Font Format CFF font file that triggers a heap-based buffer overflow,...

Integer overflow

Integer overflow in base/ftstream.c in libXft aka the X FreeType library in FreeType before 2.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Compact Font Format CFF font file that triggers a heap-based buffer overflow,...

CVE-2010-3311

Integer overflow in base/ftstream.c in libXft aka the X FreeType library in FreeType before 2.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Compact Font Format CFF font file that triggers a heap-based buffer overflow,...

CVE-2010-3311

CVE-2010-3311 is a FreeType/ libXft vulnerability caused by an input-stream position error that can trigger a heap-based buffer overflow in CFF processing, leading to remote code execution or a crash when processing crafted fonts. Public advisories (Debian DSA-2105-1/DSA-2105-1:33FFA, CentOS CESA...

CVE-2010-3311

Integer overflow in base/ftstream.c in libXft aka the X FreeType library in FreeType before 2.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Compact Font Format CFF font file that triggers a heap-based buffer overflow,...

CVE-2010-2643

Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer...

CVE-2010-2643

Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer...

CVE-2010-2642

Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font in conjunctio...

CVE-2010-2640

Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer...