2577 matches found
CVE-2007-1213
CVE-2007-1213 is a local elevation-of-privilege flaw in the Windows 2000 SP4 TrueType Font Rasterizer. The vulnerability arises when processing defective or modified fonts, which can cause an uninitialized function pointer and allow a logged-on user to gain full control of the system. Public docu...
PT-2007-2635 · Microsoft · Windows 2000 Sp4 +1
Name of the Vulnerable Software and Affected Versions: Microsoft Windows 2000 SP4 Description: A local elevation of privilege issue exists in the TrueType Fonts rasterizer due to its handling of defective or modified font types. This could allow a logged-on user to gain privileges via crafted...
XFree86 security update
CentOS Errata and Security Advisory CESA-2007:0125 Updated XFree86 packages that fix a number of security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. XFree86 is an...
Multiple font integer overflows (CVE-2007-1352)
Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow...
Multiple font integer overflows (CVE-2007-1352)
Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow...
Multiple font integer overflows (CVE-2007-1352)
Integer overflow in the bdfReadCharacters function in bdfread.c in 1 X.Org libXfont before 20070403 and 2 freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow...
Multiple font integer overflows (CVE-2007-1352)
Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow...
libgd graphics library code execution
JIS fonts parsing problem in gdImageStringFTEx function...
Debian DSA-1193-1 : xfree86 - several vulnerabilities
Several vulnerabilities have been discovered in the X Window System, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-3467 Chris Evan discovered an integer overflow in the code t...
DSA-1193-1 xfree86
Bulletin has no description...
LibXfont, monolithic X.org: Multiple integer overflows
Background libXfont is the X.Org Xfont library, some parts are based on the FreeType code base. Description Several integer overflows have been found in the CID font parser. Impact A remote attacker could exploit this vulnerability by enticing a user to load a malicious font file resulting in the...
XFree / X.org integer overflows
Multiple integer overflows on Type One fonts parsing...
XFree86 / X11.org integer overflow
Integer overflow on PCF fonts parsing...
Microsoft Windows embedded web fonts memory corruption
Memory corruption on parsing web fonts embedded to HTML page. May be used to install trojans, backdoors or another malware to client computer...
Microsoft Security Bulletin MS06-002 Vulnerability in Embedded Web Fonts Could Allow Remote Code Execution (908519)
Microsoft Security Bulletin MS06-002 Vulnerability in Embedded Web Fonts Could Allow Remote Code Execution 908519 Published: January 10, 2006 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity...
MS06-002: Vulnerability in Embedded Web Fonts Could Allow Remote Code Execution (908519)
The remote version of Microsoft Windows contains a flaw in the Embedded Web Font engine. An attacker could execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page or by sending a malicious font file. C Tenable Network Security, Inc...
Microsoft embedded web font buffer overflow
Overview A heap-based buffer overflow in the way Microsoft Windows processes embedded web fonts may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Windows contains a heap-based buffer overflow in a routine that processes embedded w...
GLSA-200508-08 : Xpdf, Kpdf, GPdf: Denial of Service vulnerability
The remote host is affected by the vulnerability described in GLSA-200508-08 Xpdf, Kpdf, GPdf: Denial of Service vulnerability Xpdf, Kpdf and GPdf do not handle a broken table of embedded TrueType fonts correctly. After detecting such a table, Xpdf, Kpdf and GPdf attempt to reconstruct the...
Xpdf, Kpdf, GPdf: Denial of Service vulnerability
Background Xpdf, Kpdf and GPdf are PDF file viewers that run under the X Window System. Kpdf and GPdf both contain Xpdf code. Kpdf is also part of kdegraphics. Description Xpdf, Kpdf and GPdf do not handle a broken table of embedded TrueType fonts correctly. After detecting such a table, Xpdf, Kp...
USN-163-1: xpdf vulnerability
xpdf and kpdf did not sufficiently verify the validity of the "loca" table in PDF files, a table that contains glyph description information for embedded TrueType fonts. After detecting the broken table, xpdf attempted to reconstruct the information in it, which caused the generation of a huge...