18 matches found
EUVD-2005-1622
Malware in sbrugna...
Debian dsa-5642 : php-dompdf-svg-lib - security update
The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5642 advisory. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5642-1...
SUSE CVE-2017-11573
FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName parsettf.c resulting in DoS or code execution via a crafted otf file...
CVE-2021-21821
A stack-based buffer overflow vulnerability exists in the PDF processfontname functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
PT-2021-14797 · Accusoft · Accusoft Imagegear
Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.9 Description: A stack-based buffer overflow issue exists in the PDF process fontname functionality. This can be triggered by a specially crafted malformed file, potentially leading to code execution. An attacker...
IBM Forms Viewer - Unicode Buffer Overflow
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include REXML include...
IBM Forms Viewer Unicode Buffer Overflow
This Metasploit module exploits a stack-based buffer overflow in IBM Forms Viewer. The vulnerability is due to a dangerous usage of strcpy-like function, and occurs while parsing malformed XFDL files, with a long fontname value. This Metasploit module has been tested successfully on IBM Forms...
IBM Forms Viewer Unicode Buffer Overflow
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 'IBM Forms Viewer Unicode Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer...
IBM Forms Viewer 'fontname' Stack Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Forms Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within a document...
IBM Forms Viewer栈缓冲区溢出漏洞
CVECAN ID: CVE-2013-5447 IBM Forms Viewer是其中的一个客户端程序,它能够打开、填写、签署、提交和保存XFDL表单,可作为独立的应用程序或以嵌入在Web浏览器内的方式显示表单。 IBM Forms Viewer 4.0.0.3之前的4.x版本和8.0.1.1前的8.x版本中存在基于栈的缓冲区溢出漏洞。远程攻击者可借助特制的XFDL表单利用该漏洞执行任意代码。 0 IBM Forms Viewer 4.0 IBM Forms Viewer 4.0.0.1 IBM Forms Viewer 4.0.0.2 IBM Forms Viewer 8.0 IBM...
Microsoft Works File Converter FontName buffer overflow
Added: 06/15/2009 CVE: CVE-2009-1533 BID: 35184 OSVDB: 54939 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows command execution when a user opens a WPS file...
Microsoft Works File Converter FontName buffer overflow
Added: 06/15/2009 CVE: CVE-2009-1533 BID: 35184 OSVDB: 54939 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows command execution when a user opens a WPS file...
Microsoft Works File Converter FontName buffer overflow
Added: 06/15/2009 CVE: CVE-2009-1533 BID: 35184 OSVDB: 54939 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows command execution when a user opens a WPS file...
Microsoft Works File Converter FontName buffer overflow
Added: 06/15/2009 CVE: CVE-2009-1533 BID: 35184 OSVDB: 54939 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows command execution when a user opens a WPS file...
XnView幻灯片FontName参数栈溢出漏洞
CVECAN ID: CVE-2008-0069 XnView是一款浏览的图片查看器,支持多种图形格式。 XnView在处理幻灯片文件(.sld)的FontName参数时存在栈溢出漏洞,如果用户受骗打开了带有超长参数的幻灯片文件的话,就可以触发这个溢出,导致执行任意指令。 0 XnView XnView 1.92.1 XnView XnView 1.92 XnView ------ 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: a href=http://pagesperso-orange.fr/pierre.g/xnview/endownload.html...
CVE-2008-0069
Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName parameter in a slideshow .sld file, a different vector than CVE-2008-1461...
XnView 1.92.1 - FontName Slideshow Buffer Overflow
XnView 1.92.1 - FontName Slideshow Buffer Overflow !/usr/bin/perl ================================================================ XnView 1.92.1 Slideshow "FontName" Buffer Overflow ================================================================ Calc execution POC Exploit for WinXP SP1 pro Engli...
CVE-2005-1619
Multiple cross-site scripting XSS vulnerabilities in 1 startpage.css.php3 aka start-page.css.php3 or 2 style.css.php3 in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web script or HTML commands via the FontName parameter. NOTE: it was later reported that 0.14.5 is also affected...