Lucene search
+L

2826 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.22 views

Adobe Bridge PostScript drop Command Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of the...

7.8CVSS2.6AI score0.02815EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.29 views

Adobe Bridge PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS1.5AI score0.01991EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.34 views

Adobe Bridge PostScript CharString Directory Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS4.9AI score0.05174EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.30 views

Adobe Bridge EPS BoundingBox Element Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of the...

7.8CVSS5AI score0.05174EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.6 views

The vulnerability of the .charkeys procedure in the PostScript/PDF Ghostscript interpreter allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the .charkeys procedure in the PostScript/PDF Ghostscript interpreter is related to a security protection flaw that allows scripts to bypass the "-dSAFER" restriction. Exploiting this vulnerability can enable an attacker operating remotely to gain access to confidential data,...

9.3CVSS7.2AI score0.03434EPSS
SaveExploits0References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.55 views

The vulnerability of the Adobe Type Manager library on the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Adobe Type Manager library in the Windows operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code due to a font processing error in Adobe PostScript Type 1...

10CVSS6.4AI score
SaveExploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.6 views

CVE-2020-1020

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could...

8.8CVSS7.6AI score0.65037EPSS
SaveExploits1References2
Prion
Prion
added 2020/04/15 3:15 p.m.45 views

Remote code execution

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could...

6.8CVSS8.3AI score0.69166EPSS
SaveExploits1References1Affected Software5
ATTACKERKB
ATTACKERKB
added 2020/04/15 12:0 a.m.56 views

CVE-2020-1020

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font – Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could...

8.8CVSS8.4AI score0.69166EPSS
SaveIn wildExploits1References2
VulnCheck KEV
VulnCheck KEV
added 2020/04/14 12:0 a.m.4 views

VulnCheck KEV: CVE-2020-0938

Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts Adobe Type 1 PostScript format that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who...

7.8CVSS7.8AI score0.69166EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/04/14 12:0 a.m.5 views

PT-2020-2279 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: A remote code execution issue exists in Microsoft Windows due to the improper handling of a specially-crafted multi-master font in the Adobe Type 1 PostScript format by the Window...

8.8CVSS7.5AI score0.65037EPSS
SaveExploits1References20
VulnCheck KEV
VulnCheck KEV
added 2020/04/14 12:0 a.m.5 views

VulnCheck KEV: CVE-2020-1020

Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts Adobe Type 1 PostScript format that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who...

8.8CVSS7.5AI score0.65037EPSS
SaveExploits1References1
Veracode
Veracode
added 2020/04/10 1:9 a.m.32 views

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. The vulnerability exists as multiple flaws were found in the way FreeType handled TrueType Font TTF, Glyph Bitmap Distribution Format BDF, Windows .fnt and .fon, and PostScript Type 1 fonts. If a specially-crafted font file was loaded by an...

9.3CVSS1.9AI score0.03813EPSS
SaveExploits0References28Affected Software1
Veracode
Veracode
added 2020/04/10 1:9 a.m.24 views

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. The vulnerability exists as multiple flaws were found in the way FreeType handled TrueType Font TTF, Glyph Bitmap Distribution Format BDF, Windows .fnt and .fon, and PostScript Type 1 fonts. If a specially-crafted font file was loaded by an...

9.3CVSS1.9AI score0.04912EPSS
SaveExploits0References23Affected Software1
Veracode
Veracode
added 2020/04/10 1:9 a.m.28 views

Arbitrary Code Execution

freetype is vulenrable to arbitrary code execution. The vulnerability exists as multiple flaws were found in the way FreeType handled TrueType Font TTF, Glyph Bitmap Distribution Format BDF, Windows .fnt and .fon, and PostScript Type 1 fonts. If a specially-crafted font file was loaded by an...

9.3CVSS1.9AI score0.03813EPSS
SaveExploits0References28Affected Software1
Veracode
Veracode
added 2020/04/10 1:9 a.m.26 views

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. The vulnerability exists as multiple flaws were found in the way FreeType handled TrueType Font TTF, Glyph Bitmap Distribution Format BDF, Windows .fnt and .fon, and PostScript Type 1 fonts. If a specially-crafted font file was loaded by an...

9.3CVSS1.9AI score0.04635EPSS
SaveExploits0References28Affected Software1
Veracode
Veracode
added 2020/04/10 1:9 a.m.39 views

Arbitrary Code Execution

ghostscript is vulnerable to arbitrary code execution. The vulnerability exists as it was found that Ghostscript always tried to read Ghostscript system initialization files from the current working directory before checking other directories, even if a search path that did not contain the curren...

7.2CVSS2.8AI score0.00505EPSS
SaveExploits1References23Affected Software1
Veracode
Veracode
added 2020/04/10 1:9 a.m.23 views

Arbitrary Code Execution

ghostscript is vulnerable to arbitrary code execution. The vulnerability exists as an integer overflow flaw was found in Ghostscript's TrueType bytecode interpreter. An attacker could create a specially-crafted PostScript or PDF file that, when interpreted, could cause Ghostscript to crash or,...

9.3CVSS4.1AI score0.06755EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
added 2020/04/10 1:5 a.m.21 views

Remote Code Execution (RCE)

Foomatic is vulnerable to remote code execution RCE. An input sanitization flaw was found in the foomatic-rip print filter. An attacker could submit a print job with the username, title, or job options set to appear as a command line option that caused the filter to use a specified PostScript...

6.8CVSS2.2AI score0.10795EPSS
SaveExploits1References12Affected Software1
Veracode
Veracode
added 2020/04/10 12:59 a.m.31 views

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. The vulnerability exists through a flaw found in the way the FreeType font rendering engine processed certain PostScript Type 1 fonts. If a user loaded a specially-crafted font file with an application linked against FreeType, it could cause the...

9.3CVSS2.9AI score0.06646EPSS
SaveExploits0References22Affected Software1
Rows per page
Query Builder