Lucene search
K

5 matches found

Zero Day Initiative
Zero Day Initiative
added 2025/01/09 12:0 a.m.3 views

Apple macOS libFontValidation kern Table Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the libFontValidation library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists...

3.3CVSS6AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2015/03/17 5:58 p.m.1 views

freetype: buffer over-read and integer underflow in tt_face_load_kern()

The ttfaceloadkern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted TrueType font...

7.5CVSS6AI score0.01688EPSS
Exploits1References4
OSV
OSV
added 2015/02/08 12:0 a.m.0 views

UBUNTU-CVE-2014-9658

The ttfaceloadkern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted TrueType font...

7.5CVSS7.2AI score0.01688EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.45 views

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2013:0777-1)

java-160-openjdk was updated to 1.12.5 bnc817157 - Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework...

10CVSS7.1AI score0.86252EPSS
Exploits15References21
ATTACKERKB
ATTACKERKB
added 2012/08/15 12:0 a.m.75 views

CVE-2012-1535 Adobe Flash Player 11.3 Kern Table Parsing Integer Overflow

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted SWF content, as exploited in the wild in August 2012 with SWF...

9.3CVSS8.1AI score0.91607EPSS
In wildExploits11References7
Rows per page
Query Builder