Lucene search
+L

9374 matches found

RedHat Linux
RedHat Linux
added 2007/04/03 7:10 p.m.9 views

Multiple font integer overflows (CVE-2007-1352)

Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow...

3.8CVSS8AI score0.01524EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2007/04/03 7:10 p.m.7 views

Multiple font integer overflows (CVE-2007-1352)

Integer overflow in the bdfReadCharacters function in bdfread.c in 1 X.Org libXfont before 20070403 and 2 freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow...

8.5CVSS8AI score0.05586EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2007/04/03 6:48 p.m.9 views

Multiple font integer overflows (CVE-2007-1352)

Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow...

3.8CVSS8AI score0.01524EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2007/04/03 6:48 p.m.7 views

Multiple font integer overflows (CVE-2007-1352)

Integer overflow in the bdfReadCharacters function in bdfread.c in 1 X.Org libXfont before 20070403 and 2 freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow...

8.5CVSS8AI score0.05586EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2007/04/03 6:30 p.m.12 views

Multiple font integer overflows (CVE-2007-1352)

Integer overflow in the bdfReadCharacters function in bdfread.c in 1 X.Org libXfont before 20070403 and 2 freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow...

8.5CVSS8AI score0.05586EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2007/04/03 6:30 p.m.39 views

Important: Red Hat Security Advisory: libXfont security update

Updated X.org libXfont packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. X.org is an open source implementation of the X Window System. It provides the basic...

8.5CVSS7.5AI score0.05586EPSS
SaveExploits0References2
Symantec
Symantec
added 2007/04/03 12:00 a.m.21 views

Microsoft Windows Graphics Device Interface Font Rasterizer Local Privilege Escalation Vulnerability

Description Microsoft Windows GDI Font Rasterizer is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain complete control of an affected computer. Failed attempts will likely cause the operating system to crash, resulting in denial-of-service conditions...

0.1AI score
SaveExploits0References3Affected Software6
Oracle linux
Oracle linux
added 2007/03/22 12:00 a.m.52 views

Important: XFree86 security update

4.3.0-115.EL.0.2 - Change Patch - needs to be -p0 not -p1 4.3.0-115.EL.0.1 - Add oracle detection to Imake. 4.3.0-115.EL - Add xorg-x11-6.8.2-sorted-xkbcomp-dirs.patch to fix rpmdiff multilib failure. 4.3.0-114.EL - Add xorg-x11-server-CVE-2006-6101.patch 218870 4.3.0-113.EL - Fix for CID font...

7.5CVSS4AI score0.04385EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2007/02/18 12:00 a.m.10 views

MDKA-2005:041 : freetype2

Updated freetype2 packages fix an invalid subpixel rendering for LCD screens with Bitstream Vera font problem. The Bitstream Vera font is the font used by default. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled o...

0.1AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2007/02/18 12:00 a.m.28 views

SUSE-SA:2006:037: freetype2, freetype2-devel

The remote host is missing the patch for the advisory SUSE-SA:2006:037 freetype2, freetype2-devel. The freetype2 library renders TrueType fonts for open source projects. More than 900 packages on SUSE Linux use this library. Therefore the integer overflows in this code found by Josh Bressers and...

5.8AI score
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2007/02/17 12:00 a.m.45 views

AMD64 x86 emulation Sun's J2SE Development Kit: Multiple vulnerabilities

Background The Sun Java Development Kit JDK and the Sun Java Runtime Environment JRE provide the Sun Java platform. The x86 emulation Sun's J2SE Development Kit for AMD64 contains a vulnerable version of Sun's JDK. Description Chris Evans has discovered multiple buffer overflows in Sun JDK and Su...

9.3CVSS7.1AI score0.11335EPSS
SaveExploits2
seebug.org
seebug.org
added 2007/02/01 12:00 a.m.17 views

GD图形库JIS编码字体缓冲区溢出漏洞

GD Graphics Library是一款流行的图形库,用于动态图象建立。 GD图形库处理JIS编码字体存在缓冲区溢出,远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当处理特殊畸形的字符串时如果使用了JIS编码字体,由于NULL终止符的增加,会导致不可预料的结果,可能导致以应用程序进程权限任意指令执行。 RedHat Enterprise Linux WS 5 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux ES 5 RedHat Enterprise Linux ES 4 RedHat Enterprise Linu...

7AI score
SaveExploits0
NVD
NVD
added 2007/01/30 5:28 p.m.38 views

CVE-2007-0455

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font...

7.5CVSS7.9AI score0.11857EPSS
SaveExploits0References35
Prion
Prion
added 2007/01/30 5:28 p.m.36 views

Buffer overflow

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font...

7.5CVSS6.6AI score0.11857EPSS
SaveExploits0References35Affected Software7
OSV
OSV
added 2007/01/30 5:28 p.m.10 views

DEBIAN-CVE-2007-0455

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font...

7.5CVSS9.3AI score0.11857EPSS
SaveExploits0References1
OSV
OSV
added 2007/01/30 5:28 p.m.14 views

CVE-2007-0455

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font...

7.9AI score
SaveExploits0References38
UbuntuCve
UbuntuCve
added 2007/01/30 5:28 p.m.49 views

CVE-2007-0455

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font...

7.5CVSS7.1AI score0.11857EPSS
SaveExploits0References2
CVE
CVE
added 2007/01/30 5:00 p.m.151 views

CVE-2007-0455

CVE-2007-0455 is a buffer over-read in libgd2/libgd (GD Graphics Library) prior to 2.0.34 that affects the gdImageStringFTEx path in gdft.c. A crafted string using a JIS-encoded font could crash the PHP interpreter or, in some contexts, allow arbitrary code execution on the remote host. Public re...

7.5CVSS7.2AI score0.11857EPSS
SaveExploits0References35Affected Software1
Cvelist
Cvelist
added 2007/01/30 5:00 p.m.46 views

CVE-2007-0455

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font...

7.1AI score0.11857EPSS
SaveExploits0References35
Debian CVE
Debian CVE
added 2007/01/30 5:00 p.m.41 views

CVE-2007-0455

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font...

7.5CVSS7.4AI score0.11857EPSS
SaveExploits0
Rows per page
Query Builder