9323 matches found
Invision Power Board : XSS in [FONT] and [COLOR] tags.
Informations : °°°°°°°°°°°°°° Language : PHP Version : 1.2 FINAL Website : http://www.invisionboard.com/ Problem : Permanent XSS Dev : °°°°° FONT=expressionalertdocument.cookietext/FONT will made the HTML : span style='font-family:expressionalertdocument.cookie'text/span...
CVE-2003-0730
Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflow attacks...
XFree86 libraries integer overflow
Integer overflows on font server functions...
Multiple integer overflows in XFree86 (local/remote)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote and local vulnerabilities in XFree86 font libraries Product: XFree86 4.3.0 Impact: Potential privilege escalation / remote code execution Bug class: Integer overflow Vendor notified: Yes Fix available: Yes see end of advisory Details: I have...
TrueType Font Server for X11 (xfstt) Malformed Packet Remote Overflow
The remote X Font Service for TrueType xfstt is vulnerable to a remote buffer overflow which may lead to code execution as root or a denial of service. C Tenable Network Security, Inc. Ref: Date: Tue, 15 Jul 2003 00:38:20 +0200 From: ruben unteregger To: [email protected] Subject: xfstt-1...
[EXPL] Hummingbird's Exceed X Emulator Fonts Directive Mishandling
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion Beyond Security in Canada Toronto-based Sunrays Technologies is now Beyond Security's representative in Canada. We welcome ISPs, system...
Hummingbird Exceed X buffer overflow
Buffer overflow on oversized font name...
Exceed 5.06.06.17.18.0 - Font Name Handler Buffer Overflow
Exceed 5.06.06.17.18.0 - Font Name Handler Buffer Overflow // source: https://www.securityfocus.com/bid/8194/info The Exceed server and client have been reported prone to a remotely triggered buffer overflow vulnerability. An attacker may trigger this vulnerability by sending excessive data as a...
Exceed 5.0/6.0/6.1/7.1/8.0 - Font Name Handler Buffer Overflow
// source: https://www.securityfocus.com/bid/8194/info The Exceed server and client have been reported prone to a remotely triggered buffer overflow vulnerability. An attacker may trigger this vulnerability by sending excessive data as a font name to the server via a malicios XLoadQueryFont...
Updated KDE packages available
New KDE 3.1.1a packages are available for Slackware 9.0 which fix a security problem with the handling of PS and PDF documents. Here are the details from the Slackware 9.0 ChangeLog: Thu Apr 17 15:32:15 PDT 2003 patches/packages/kde/: Upgraded to KDE 3.1.1a. Also included in this directory are a...
HP-UX 7-11 - X Font Server Local Buffer Overflow
HP-UX 7-11 - X Font Server Local Buffer Overflow source: https://www.securityfocus.com/bid/10551/info HP-UX X Font Server is reportedly affected by a local buffer overflow vulnerability. This issue is due to a failure of the application to properly validate the length of a user-supplied string...
HP-UX 7-11 - X Font Server Local Buffer Overflow
source: https://www.securityfocus.com/bid/10551/info HP-UX X Font Server is reportedly affected by a local buffer overflow vulnerability. This issue is due to a failure of the application to properly validate the length of a user-supplied string before copying it into a finite buffer. This issue...
PT-2003-1119 · Xfree86 +1 · Xterm +2
Name of the Vulnerable Software and Affected Versions: XFree86-xf86cfg versions 4.1.0 through 4.2.1 XFree86-font-utils versions 4.1.0 through 4.2.1-21 XFree86-ISO8859-9-75dpi-fonts versions 4.1.0 through 4.2.1-21 XFree86-tools versions 4.1.0 through 4.2.1-21 XFree86-devel versions 4.1.0 through...
Microsoft Windows XP/2000 - Fontview Denial of Service
source: https://www.securityfocus.com/bid/6536/info Microsoft Windows is vulnerable to a denial of service condition when attempting to view certain OpenType fonts .otf. When a malformed font file is viewed with the default Windows font viewer, it will cause the system to Blue Screen and reboot...
Microsoft Windows XP2000 - Fontview Denial of Service
Microsoft Windows XP2000 - Fontview Denial of Service source: https://www.securityfocus.com/bid/6536/info Microsoft Windows is vulnerable to a denial of service condition when attempting to view certain OpenType fonts .otf. When a malformed font file is viewed with the default Windows font viewer...
CVE-2002-1705
Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service crash via a Cascading Style Sheet CSS with the pcssText element declared and a bold font weight...
CVE-2002-1317
Buffer overflow in Dispatch routine for XFS font server fs.auto on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service crash or execute arbitrary code via a certain XFS query...
X Font Service Crafted XFS Query Remote Overflow
The remote X Font Service xfs is affected by a buffer overflow. An attacker may use this flaw to gain shell access on the remote host as 'root' or 'nobody'. C Tenable Network Security, Inc. It turns out the initial revision of this script would not crash all versions of the font service...
ISS Security Brief: Solaris fs.auto Remote Compromise Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- ISS X-Force Security Brief November 25, 2002 Solaris fs.auto Remote Compromise Vulnerability Synopsis: ISS X-Force has discovered a vulnerability in the Sun Microsystems implementation of the "X Window Font Service", or "XFS". The XFS service was designed as a...