9045 matches found
Buffer overflows in XFree86 servers
A number of buffer overflows were recently discovered in XFree86, prompted by initial discoveries by iDEFENSE. These buffer overflows are present in the font alias handling. An attacker with authenticated access to a running X server may exploit these vulnerabilities to obtain root privileges on...
Important: Red Hat Security Advisory: : Updated XFree86 packages provide security and bug fixes
Updated XFree86 packages for Red Hat Linux 7.3 and 8.0 provide security fixes to font libraries and XDM. XFree86 is an implementation of the X Window System providing the core graphical user interface and video drivers in Red Hat Linux. XDM is the X display manager. Multiple integer overflows in...
Important: Red Hat Security Advisory: : Updated XFree86 packages provide security and bug fixes
Updated XFree86 packages for Red Hat Linux 7.1 and 7.2 provide security fixes to font libraries and XDM. XFree86 is an implementation of the X Window System providing the core graphical user interface and video drivers in Red Hat Linux. XDM is the X display manager. Multiple integer overflows in...
Important: Red Hat Security Advisory: : Updated XFree86 packages provide security and bug fixes
Updated XFree86 packages for Red Hat Linux 9 provide security fixes to font libraries and XDM. XFree86 is an implementation of the X Window System providing the core graphical user interface and video drivers in Red Hat Linux. XDM is the X display manager. Multiple integer overflows in the transf...
Invision Power Board : XSS in [FONT] and [COLOR] tags.
Informations : °°°°°°°°°°°°°° Language : PHP Version : 1.2 FINAL Website : http://www.invisionboard.com/ Problem : Permanent XSS Dev : °°°°° FONT=expressionalertdocument.cookietext/FONT will made the HTML : span style='font-family:expressionalertdocument.cookie'text/span...
CVE-2003-0730
Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflow attacks...
Multiple integer overflows in XFree86 (local/remote)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote and local vulnerabilities in XFree86 font libraries Product: XFree86 4.3.0 Impact: Potential privilege escalation / remote code execution Bug class: Integer overflow Vendor notified: Yes Fix available: Yes see end of advisory Details: I have...
XFree86 libraries integer overflow
Integer overflows on font server functions...
TrueType Font Server for X11 (xfstt) Malformed Packet Remote Overflow
The remote X Font Service for TrueType xfstt is vulnerable to a remote buffer overflow which may lead to code execution as root or a denial of service. C Tenable Network Security, Inc. Ref: Date: Tue, 15 Jul 2003 00:38:20 +0200 From: ruben unteregger To: [email protected] Subject: xfstt-1...
Hummingbird Exceed X buffer overflow
Buffer overflow on oversized font name...
[EXPL] Hummingbird's Exceed X Emulator Fonts Directive Mishandling
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion Beyond Security in Canada Toronto-based Sunrays Technologies is now Beyond Security's representative in Canada. We welcome ISPs, system...
Exceed 5.06.06.17.18.0 - Font Name Handler Buffer Overflow
Exceed 5.06.06.17.18.0 - Font Name Handler Buffer Overflow // source: https://www.securityfocus.com/bid/8194/info The Exceed server and client have been reported prone to a remotely triggered buffer overflow vulnerability. An attacker may trigger this vulnerability by sending excessive data as a...
Exceed 5.0/6.0/6.1/7.1/8.0 - Font Name Handler Buffer Overflow
// source: https://www.securityfocus.com/bid/8194/info The Exceed server and client have been reported prone to a remotely triggered buffer overflow vulnerability. An attacker may trigger this vulnerability by sending excessive data as a font name to the server via a malicios XLoadQueryFont...
Updated KDE packages available
New KDE 3.1.1a packages are available for Slackware 9.0 which fix a security problem with the handling of PS and PDF documents. Here are the details from the Slackware 9.0 ChangeLog: Thu Apr 17 15:32:15 PDT 2003 patches/packages/kde/: Upgraded to KDE 3.1.1a. Also included in this directory are a...
HP-UX 7-11 - X Font Server Local Buffer Overflow
HP-UX 7-11 - X Font Server Local Buffer Overflow source: https://www.securityfocus.com/bid/10551/info HP-UX X Font Server is reportedly affected by a local buffer overflow vulnerability. This issue is due to a failure of the application to properly validate the length of a user-supplied string...
HP-UX 7-11 - X Font Server Local Buffer Overflow
source: https://www.securityfocus.com/bid/10551/info HP-UX X Font Server is reportedly affected by a local buffer overflow vulnerability. This issue is due to a failure of the application to properly validate the length of a user-supplied string before copying it into a finite buffer. This issue...
PT-2003-1119 · Xfree86 +1 · Xterm +2
Name of the Vulnerable Software and Affected Versions: XFree86-xf86cfg versions 4.1.0 through 4.2.1 XFree86-font-utils versions 4.1.0 through 4.2.1-21 XFree86-ISO8859-9-75dpi-fonts versions 4.1.0 through 4.2.1-21 XFree86-tools versions 4.1.0 through 4.2.1-21 XFree86-devel versions 4.1.0 through...
Microsoft Windows XP2000 - Fontview Denial of Service
Microsoft Windows XP2000 - Fontview Denial of Service source: https://www.securityfocus.com/bid/6536/info Microsoft Windows is vulnerable to a denial of service condition when attempting to view certain OpenType fonts .otf. When a malformed font file is viewed with the default Windows font viewer...
Microsoft Windows XP/2000 - Fontview Denial of Service
source: https://www.securityfocus.com/bid/6536/info Microsoft Windows is vulnerable to a denial of service condition when attempting to view certain OpenType fonts .otf. When a malformed font file is viewed with the default Windows font viewer, it will cause the system to Blue Screen and reboot...
