9367 matches found
Sun Java Applet - Font.createFont Remote Denial of Service
source: https://www.securityfocus.com/bid/17981/info Sun Java is prone to a remote denial-of-service vulnerability because the application fails to properly handle certain Java applets. Successfully exploiting this issue will cause the application to create a temporary file that will grow in an...
CVE-2006-1453
CVE-2006-1453 affects Apple QuickTime before 7.1. It is a stack-based/buffer overflow in QuickDraw PICT image format support that lets remote attackers execute arbitrary code via a crafted image containing malformed font information. The connected documents specify that QuickTime 7.1 (Mac/Windows...
CVE-2006-1896
Unspecified vulnerability in phpBB allows remote authenticated users with Administration Panel access to execute arbitrary PHP code via crafted Font Colour 3 $themefontcolor3 variable and/or signature values, possibly involving the highlight functionality. NOTE: the original report does not clari...
CVE-2006-0807
Stack-based buffer overflow in NJStar Chinese and Japanese Word Processor 4.x and 5.x before 5.10 allows user-assisted attackers to execute arbitrary code via font names in NJStar .njx documents...
Stack overflow
Stack-based buffer overflow in NJStar Chinese and Japanese Word Processor 4.x and 5.x before 5.10 allows user-assisted attackers to execute arbitrary code via font names in NJStar .njx documents...
CVE-2006-0807
Stack-based buffer overflow in NJStar Chinese and Japanese Word Processor 4.x and 5.x before 5.10 allows user-assisted attackers to execute arbitrary code via font names in NJStar .njx documents...
CVE-2006-0807
CVE-2006-0807 is a stack-based buffer overflow in NJStar Chinese and Japanese Word Processor (versions 4.x and 5.x prior to 5.10). The vulnerability allows user-assisted or remote exploitation via font names in NJX documents, potentially enabling arbitrary code execution on affected systems. Affe...
NJStar text processor buffer overflow
Buffer overflow on oversized font name...
CVE-2006-0489
Buffer overflow in the font command of mIRC, probably 6.16, allows local users to execute arbitrary code via a long string. NOTE: the original researcher claims that issue has been disputed by the vendor, and that the vendor stated "as far as I can tell, this is neither an exploit nor a...
Buffer overflow
DISPUTED Buffer overflow in the font command of mIRC, probably 6.16, allows local users to execute arbitrary code via a long string. NOTE: the original researcher claims that issue has been disputed by the vendor, and that the vendor stated "as far as I can tell, this is neither an exploit nor a...
PT-2006-1554 · Mirc · Mirc
Name of the Vulnerable Software and Affected Versions: mIRC version 6.16 Description: A buffer overflow issue in the font command of mIRC allows local users to execute arbitrary code via a long string. The vendor has disputed this issue, stating it is a local bug in mIRC and not a vulnerability. ...
Ubuntu 4.10 / 5.04 : xpdf vulnerability (USN-163-1)
xpdf and kpdf did not sufficiently verify the validity of the 'loca' table in PDF files, a table that contains glyph description information for embedded TrueType fonts. After detecting the broken table, xpdf attempted to reconstruct the information in it, which caused the generation of a huge...
Microsoft Embedded OpenType Font Engine "t2embed" Remote Heap Overflow
/ oh my, bad luck, eEye released the advisory few minutes ago, and I've been researching this bug since about a week, sorry, it's cancelled / NOTE: this is super initial raport, if you expect some more info mail me for the bank account number... Microsoft Embedded OpenType Font Engine "t2embed"...
[VulnWatch] [EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability
EEYEB-20050801 Windows Embedded Open Type EOT Font Heap Overflow Vulnerability Release Date: January 10, 2006 Date Reported: July 31, 2005 Time to Patch: 163 Days Severity: High Code Execution Systems Affected: Windows ME Windows 98 Windows NT Windows 2000 Windows XP SP1 / SP2 Windows Server 2003...
CVE-2006-0010
Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type EOT web font that triggers the...
Heap overflow
Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type EOT web font that triggers the...
CVE-2006-0010
Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type EOT web font that triggers the...
CVE-2006-0010
CVE-2006-0010 describes a heap-based buffer overflow in T2EMBED.DLL on Windows platforms (Windows 98/ME, Windows 2000 SP4, Windows XP SP1/SP2, Windows Server 2003 up to SP1). The overflow is triggered while Windows decompresses Embedded Open Type (EOT) fonts referenced by web pages or email, allo...
Microsoft Windows Embedded Web Font Buffer Overflow Vulnerability
Description Microsoft Windows is susceptible to a remotely exploitable buffer-overflow vulnerability. This issue is due to the software's failure to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue allows remote attackers to execute...