Microsoft .NET Framework Remote Code Execution Vulnerabilities (3104503)

This host is missing a critical security update according to Microsoft Bulletin MS15-128. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS15-128: Security Update for Microsoft Graphics Component to Address Remote Code Execution (3104503)

The remote Windows host is affected by multiple remote code execution vulnerabilities due to improper handling of embedded fonts by the Windows font library. A remote attacker can exploit these by convincing a user to open a file or visit a website containing a specially crafted embedded font,...

KLA10718 Code execution vulnerabilities in Microsoft Graphics Component

Improper fonts handling was found in Microsoft Graphics Component used in Multiple Microsoft products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed content. Original advisories CVE-2015-6108...

MS15-115: Security update for Windows to address remote code execution: November 10, 2015

Resolves vulnerabilities in Windows that could allow remote code execution if an attacker convinces a user to open a specially crafted document or to go to an untrusted webpage that contains embedded fonts.SummaryThis security update resolves vulnerabilities in Windows. The most severe of the...

VulnCheck KEV: CVE-2015-1671

A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts...

Apple iOS Denial of Service Vulnerability (CNVD-2015-07141)

Apple iOS is an operating system for handheld devices developed by Apple Inc. A denial of service vulnerability exists in Apple iOS versions prior to 9.1, OS X 10.11.1,watchOS versions prior to 2.0.1. It allows remote attackers to execute arbitrary code or launch denial of service attacks via...

Apple iOS/OS X FontParser Memory Corruption Vulnerability (CNVD-2015-07110)

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in FontParser in Apple iOS versions prior to 9.1 and Apple OS X versions prior to...

Apple iOS/OS X FontParser Memory Corruption Vulnerability (CNVD-2015-07111)

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in FontParser in Apple iOS versions prior to 9.1 and Apple OS X versions prior to...

Apple iOS Denial of Service Vulnerability (CNVD-2015-07147)

Apple iOS is an operating system for handheld devices developed by Apple Inc. A denial of service vulnerability exists in Apple iOS versions prior to 9.1 and OS X versions prior to 10.11.1. Allows remote attackers to execute arbitrary code or cause a denial of service via crafted font files...

chromium-browser: CORS bypass in CSS fonts

The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets CSS implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows...

Font <= 7.5 - Authenticated Path Traversal

The Font - official webfonts plugin of Fonts For Web. NO CODING! Just click & change font size, color and font face visually! WordPress plugin was affected by an Authenticated Path Traversal security vulnerability...

FreeType DoS

Crash on fonts parsing...

Oracle: Security Advisory (ELSA-2007-0731)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : libXfont (ALAS-2015-597)

An integer overflow flaw was found in the way libXfont processed certain Glyph Bitmap Distribution Format BDF fonts. A malicious, local user could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with the privileges of the X.Org server. CVE-2015-1802 An integer...

Important: libXfont

Issue Overview: An integer overflow flaw was found in the way libXfont processed certain Glyph Bitmap Distribution Format BDF fonts. A malicious, local user could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with the privileges of the X.Org server. CVE-2015-1802...

Windows ATMFD.DLL CharString Stream Out-of-Bounds Reads

Source: https://code.google.com/p/google-security-research/issues/detail?id=382&can=1 We have encountered a number of Windows kernel crashes in the ATMFD.DLL OpenType driver while processing corrupted OTF font files, such as: --- DRIVERPAGEFAULTBEYONDENDOFALLOCATION d6 N bytes of memory was...

FreeType uninitilized memory access

Uninitialized memory access on fonts parsing...

Microsoft Graphics Component Buffer Overflow Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists when the Adobe Type Manager library in various Microsoft products fails to properly handle specially designed OpenType fonts. An attacker could exploit this...

Microsoft Windows OpenType Font Analysis Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A denial of service vulnerability exists when the Adobe Type Manager library in Microsoft Windows fails to properly handle specially designed OpenType fonts. An attacker could exploit this vulnerability...

MS15-097: Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution (3089656)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the Windows Adobe Type Manager Library due to improper handling of specially crafted OpenType fonts. An authenticated, remote attacker...