CVE-2004-0901

CVE-2004-0901 (Font Conversion Vulnerability) affects WordPad’s Word for Windows 6.0 Converter (MSWRD632.WPC) used by WordPad. A crafted Word/RTF/WRI/ DOC file can trigger a buffer/length-check flaw, leading to remote code execution when opened by WordPad. Public advisories (MS04-041) document tw...

CVE-2004-0901

Microsoft Word for Windows 6.0 Converter MSWRD632.WPC, as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different...

GNU UnRTF 0.19.3 - Font Table Conversion Buffer Overflow

GNU UnRTF 0.19.3 - Font Table Conversion Buffer Overflow source: https://www.securityfocus.com/bid/12030/info GNU UnRTF is prone to a buffer overflow vulnerability. This issue is exposed when the program converts RTF font table data. Since RTF documents may originate from an external or untrusted...

GNU UnRTF 0.19.3 - Font Table Conversion Buffer Overflow

source: https://www.securityfocus.com/bid/12030/info GNU UnRTF is prone to a buffer overflow vulnerability. This issue is exposed when the program converts RTF font table data. Since RTF documents may originate from an external or untrusted source, this vulnerability is considered to be remote in...

Microsoft Word for Windows 6.0 Converter Font Conversion Buffer Overflow Vulnerability

Description Microsoft Word for Windows 6.0 Converter is reported prone to a buffer overflow vulnerability. An attacker may exploit this issue to gain unauthorized access to a vulnerable computer in the context of the user running the application. This issue specifically exists in the Font...

XFree86 4.3 - Font Information File Buffer Overflow

// source: https://www.securityfocus.com/bid/9636/info It has been reported that the XFree86 X Windows system is prone to a local buffer overflow vulnerability. The issue arises from improper bounds checking when parsing the 'font.alias' file. Successful exploitation of this issue may allow an...

Microsoft Internet Explorer 6 - Font Tag Denial of Service

Microsoft Internet Explorer 6 - Font Tag Denial of Service source: https://www.securityfocus.com/bid/11536/info Microsoft Internet Explorer is reported prone to a remote denial of service vulnerability. The issue presents itself due to a malfunction that occurs when certain font tags are...

Microsoft Internet Explorer 6 - Font Tag Denial of Service

source: https://www.securityfocus.com/bid/11536/info Microsoft Internet Explorer is reported prone to a remote denial of service vulnerability. The issue presents itself due to a malfunction that occurs when certain font tags are encountered and rendered. When a page that contains the malicious...

Debian DSA-443-1 : xfree86 - several vulnerabilities

A number of vulnerabilities have been discovered in XFree86. The corrections are listed below with the identification from the Common Vulnerabilities and Exposures CVE project : - CAN-2004-0083 : Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and...

linux_base -- vulnerabilities in Red Hat 7.1 libraries

Trevor Johnson reported that the Red Hat Linux RPMs used by linuxbase contained multiple older vulnerabilities, such as a DNS resolver issue and critical bugs in X font handling and XPM image handling...

CVE-2002-1317

The CVE-2002-1317 flaw affects the Solaris X Window Font Server (XFS) daemon fs.auto, where the Dispatch() function handles XFS queries. This remotely exploitable buffer overflow can allow an attacker to crash the service or execute arbitrary code with the fs.auto/Font Server privileges (typicall...

CVE-2002-1317

Buffer overflow in Dispatch routine for XFS font server fs.auto on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service crash or execute arbitrary code via a certain XFS query...

GLSA-200402-02 : XFree86 Font Information File Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-200402-02 XFree86 Font Information File Buffer Overflow Exploitation of a buffer overflow in The XFree86 Window System discovered by iDefence allows local attackers to gain root privileges. The problem exists in the parsing of the...

AIX 5.1 : IY53673

The remote host is missing AIX Critical Security Patch number IY53673 SECURITY: Buffer overflow in X-Windows font library. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

MSN Messenger Malformed Font Field Remote DoS

Binary data 1268.prm...

UnixWare/OpenServer/Open Unix XSco buffer overflow

Buffer overflow on fonts aliases reading...

OpenServer 5.0.6 OpenServer 5.0.7 : Xsco contains a buffer overflow that could be exploited to gain root privileges.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: OpenServer 5.0.6 OpenServer 5.0.7 : Xsco contains a buffer overflow that could be exploited to gain root privileges. Advisory number: SCOSA-2004.3 Issue date: 2004 July 29 Cross reference: sr889371 fz528866 erg712547...

Mandrake Linux Security Advisory : XFree86 (MDKSA-2003:089)

Several vulnerabilities were discovered by bleximathush.com in the font libraries of XFree86 version 4.3.0 and earlier. These bugs could potentially lead to execution of arbitrary code or a DoS by a remote user in any way that calls these functions, which are related to the transfer and enumerati...

Solaris 7 (sparc) : 108117-06

OpenWindows 3.6.1: Font Server patch. Date this patch was last updated by Sun : Dec/18/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (x86) : 108130-05

OpenWindows 3.6x86: Font Server patch. Date this patch was last updated by Sun : Dec/18/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...