CVE-2005-0060

Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application...

CVE-2005-0060

CVE-2005-0060 is a local privilege-elevation vulnerability in the Windows font-processing subsystem caused by an unchecked buffer when handling certain fonts. A logged-on user could gain full control of an affected system by running a specially crafted application. Affected platforms include Wind...

Windows 2000/XP/2003 kernel multiple vulnerabilities

Buffer overflow during font files parsing, buffer overflow in CSRSS Win32 execution subsystem, privilege escalation...

Microsoft font processing buffer overflow vulnerability

Overview A privilege elevation vulnerability exists in the way that Microsoft Windows processes certain fonts. This vulnerability could allow a logged on user to take complete control of the system. Description Due to an unchecked buffer in the processing of malicious fonts, a locally authenticat...

CVE-2005-0577

CVE-2005-0577 affects DNA MKBold-MKItalic up to version 0.06_1. The vulnerability is a format string flaw in the BDF font processing that could allow remote code execution. The OpenVAS and NVD records corroborate the issue; they reference the FreeBSD ports mkbold-mkitalic package as affected. The...

CVE-2005-0576

CVE-2005-0576 concerns Solaris 9, specifically the Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd). The vulnerability is described as unknown but allows local users to modify or delete arbitrary files. The available references indicate advisories and vendor notes, but n...

CVE-2005-0576

Unknown vulnerability in Standard Type Services Framework STSF Font Server Daemon stfontserverd in Solaris 9 allows local users to modify or delete arbitrary files...

CVE-2005-0577

Format string vulnerability in DNA MKBold-MKItalic 0.061 and earlier allows remote attackers to execute arbitrary code via crafted BDF font files...

[SA14381] Sun Solaris stfontserverd Arbitrary File Manipulation Vulnerability

TITLE: Sun Solaris stfontserverd Arbitrary File Manipulation Vulnerability SECUNIA ADVISORY ID: SA14381 VERIFY ADVISORY: http://secunia.com/advisories/14381/ CRITICAL: Less critical IMPACT: Manipulation of data, DoS WHERE: Local system OPERATING SYSTEM: Sun Solaris 9 http://secunia.com/product/95...

DEBIAN-CVE-2005-0543

Cross-site scripting XSS vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via 1 the strServer, cfgBgcolorOne, or strServerChoice parameters in selectserver.lib.php, 2 the bgcolor or rowno parameters in displaytbllinks.lib.php, the leftfontfamily...

mkbold-mkitalic -- format string vulnerability

The version 0.061 and prior have a format string vulnerability which can be triggered by using a carefully-crafted BDF font file...

CVE-2004-1595

The CVE-2004-1595 entry concerns ShixxNOTE 6.net (build 117) and describes a buffer overflow in the handling of font fields, allowing a remote attacker to execute arbitrary code. Connected sources confirm concrete exploitability: Metasploit/ShixxNOTE font-field overflow modules and exploits (e.g....

HP-UX PHSS_29744 : HPSBUX0302-241 SSRT3472 rev.3 HP-UX stmkfont potential unauthorized access

s700800 11.00 X Font Server Patch : There is a potential buffer overflow in /usr/bin/stmkfont. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS29744. The text itself is copyright C Hewlett-Packard Developme...

HP-UX PHSS_28470 : HP-UX Running X Font Server (xfs) Software, Remote Unauthorized Access or Denial of Service (DoS) (HPSBUX00228 SSRT2429 rev.3)

s700800 11.11 X Font Server Patch : Potential buffer overflow in the X Font Server xfs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS28470. The text itself is copyright C Hewlett-Packard Development...

HP-UX PHSS_31179 : HP-UX Running xfs and stmkfont, Remote Unauthorized Access (HPSBUX01061 SSRT4773 rev.2)

s700800 11.11 X Font Server Patch : Potential security vulnerabilities have been reported with HP-UX running xfs and stmkfont. These vulnerabilities can be exploited to allow remote unauthorized access to resources owned by group 'bin.'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

HP-UX PHSS_28469 : HP-UX Running X Font Server (xfs) Software, Remote Unauthorized Access or Denial of Service (DoS) (HPSBUX00228 SSRT2429 rev.3)

s700800 11.00 X Font Server Patch : Potential buffer overflow in the X Font Server xfs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS28469. The text itself is copyright C Hewlett-Packard Development...

HP-UX PHSS_28471 : HP-UX Running X Font Server (xfs) Software, Remote Unauthorized Access or Denial of Service (DoS) (HPSBUX00228 SSRT2429 rev.3)

s700800 11.22 X Font Server Patch : Potential buffer overflow in the X Font Server xfs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS28471. The text itself is copyright C Hewlett-Packard Development...

CVE-2004-0901

Microsoft Word for Windows 6.0 Converter MSWRD632.WPC, as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different...

DEBIAN-CVE-2004-1297

Buffer overflow in the processfonttable function in convert.c for unrtf 0.19.3 allows remote attackers to execute arbitrary code via a crafted RTF file...

DEBIAN-CVE-2004-2714

Unspecified vulnerability in Window Maker 0.80.2 and earlier allows attackers to perform unknown actions via format string specifiers in a font specification in WMGLOBAL, probably a format string vulnerability...