UBUNTU-CVE-2014-9746

The 1 t1parsefontmatrix function in type1/t1load.c, 2 cidparsefontmatrix function in cid/cidload.c, 3 t42parsefontmatrix function in type42/t42parse.c, and 4 psparserloadfield function in psaux/psobjs.c in FreeType before 2.5.4 do not check return values, which allows remote attackers to cause a...

F5 Networks BIG-IP : Multiple FreeType vulnerabilities (K16900)

CVE-2014-9657 The ttfaceloadhdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted TrueType font. CVE-2014-9658 The...

UBUNTU-CVE-2016-1680

Use-after-free vulnerability in ports/SkFontHostFreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via unknown vectors...

Microsoft Office Graphics Remote Code Execution Vulnerability

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A remote code execution vulnerability exists in the Windows Font Library in Microsoft Office, which arises...

Microsoft Office Graphics Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delet...

KLA10804 Code execution vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities 1. An improper memory objects handling can be exploited remotely via a specially designed content; 2. An...

MS16-054: Security Update for Microsoft Office (3155544)

The version of Microsoft Office installed on the remote Windows host is affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit these vulnerabilities by convincing ...

JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue...

graphite2: Out-of-bounds read vulnerability in TfUtil:LocaLookup

A vulnerability has been discovered in Graphite2. An attacker able to trick an unsuspecting user into opening specially crafted font files in an application using Graphite2 could exploit these flaws to cause the application to crash or, potentially, execute arbitrary code with the privileges of t...

openSUSE Security Update : apparmor (openSUSE-2016-491)

This update for apparmor updates some profiles. It is specifically required for the Samba security update. profile updates : - sbin.syslog-ng - usr.sbin.identd - usr.sbin.nscd allows nscd paranoia mode - usr.sbin.smbd - usr.sbin.smbldap-useradd - apache2.d/phpsysinfo updated abstractions : - aspe...

Microsoft Windows Graphics Memory Corruption Vulnerability (CNVD-2016-02246)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in the font library of Microsoft Windows, which arises from a failure of the program to properly handle specially designed embedded fonts. A remote attacker...

Microsoft Lync Remote Code Execution Vulnerability (3148522)

This host is missing a critical security update according to Microsoft Bulletin MS16-039. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Lync Attendee Remote Code Execution Vulnerability (3148522)

This host is missing a critical security update according to Microsoft Bulletin MS16-039. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-039: Description of the security update for the .NET Framework 3.5 in Windows Server 2012: April 12, 2016

MS16-039: Description of the security update for the .NET Framework 3.5 in Windows Server 2012: April 12, 2016 View products that this article applies to. Summary This security update resolves vulnerabilities in the Microsoft .NET Framework. The vulnerabilities could allow remote code execution i...

MS16-039: Description of the security update for Windows Graphics Component: April 12, 2016

None None...

Microsoft Teams help & learning

None None...

KLA10788 Multiple vulnerabilities in Microsoft Graphics Component

Multiple serious vulnerabilities have been found in Microsoft Graphics Component as used in multiple Microsoft products. Malicious users can exploit these vulnerabilities to execute arbitrary code or gain privileges. Below is a complete list of vulnerabilities 1. An improper memory objects handli...

MS16-039: Security Update for Microsoft Graphics Component (3148522)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple elevation of privilege vulnerabilities exist in the Windows kernel-mode driver due to a failure to properly handle objects in memory. An attacker can exploit these...

CentOS Update for graphite2 CESA-2016:0594 centos7

Check the version of graphite2 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882448";...

Important: Red Hat Security Advisory: graphite2 security, bug fix, and enhancement update

An update for graphite2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...