Microsoft Windows GDI+ PNG Processing Integer Overflow (MS09-062; CVE-2009-3126)

The Windows Graphics Rendering Engine is implemented via the Graphics Device Interface GDI subsystem. GDI is a Microsoft standard for representing graphical objects and outputting these representations to devices such as monitors and printers. GDI is capable of representing vector graphics, drawi...

ZDI-10-012: Microsoft Internet Explorer Baseline Tag Rendering Remote Code Execution Vulnerability

ZDI-10-012: Microsoft Internet Explorer Baseline Tag Rendering Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-012 January 21, 2010 -- CVE ID: CVE-2010-0246 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer 7 Microsoft Internet...

MS Patches Critical Flaw in EOT Font Engine

The first Microsoft patch for 2010 is out, providing cover for a solitary vulnerability in the way Windows handles EOT Embedded OpenType fonts. The update is rated “critical” but Microsoft says there is a low likelihood of exploitation on its newer operating systems. The vulnerability, which was...

CentOS 5 : poppler (CESA-2009:0480)

Updated poppler packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Poppler is a Portable Document Format PDF rendering library, used by applications such...

CentOS 5 : poppler (CESA-2008:0239)

Updated poppler packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Poppler is a PDF rendering library, used by applications such as Evince. Kees Cook discovered ...

Microsoft DirectX RLE Compressed Targa Image File Heap Overflow (CVE-2006-4183)

Microsoft DirectX is a set of libraries that aim for accelerated video and audio experience on Microsoft Windows operating system. The three-dimension 3D acceleration engine of DirectX is known as Direct3D. Direct3D include texture rendering, which displays bitmap images on the surface of 3D...

[SECURITY] Fedora 11 Update: kazehakase-0.5.8-4.fc11

Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine...

Microsoft WMF File Polypolygon Function Buffer Overflow (MS06-026; CVE-2006-2376)

Microsoft Windows Metafile Format WMF is a proprietary standard for representing graphical objects, mainly vector based graphic. WMF is capable of representing drawing lines, polygons, curves, and fonts. A vulnerability has been discovered in the Graphics Rendering Engine GRE component of Microso...

Debian Security Advisory DSA 1941-1 (poppler)

The remote host is missing an update to poppler announced via advisory DSA 1941-1. OpenVAS Vulnerability Test $Id: deb19411.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1941-1 poppler Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1941-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1941-1] New poppler packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1941-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 25, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1936-1] New libgd2 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1936-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano November 17, 2009 http://www.debian.org/security/faq -...

[SECURITY] Fedora 10 Update: kazehakase-0.5.6-4.fc10.7

Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine...

[SECURITY] Fedora 10 Update: epiphany-2.24.3-11.fc10

Epiphany is a simple GNOME web browser based on the Mozilla rendering engine...

poppler security update

CentOS Errata and Security Advisory CESA-2009:1504 Updated poppler packages that fix multiple security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Poppler is a Portable...

[SECURITY] Fedora 11 Update: kazehakase-0.5.8-2.fc11.1

Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine...

[SECURITY] Fedora 10 Update: poppler-0.8.7-7.fc10

Poppler, a PDF rendering library, is a fork of the xpdf PDF viewer developed by Derek Noonburg of Glyph and Cog, LLC...

Upgrade media libraries to fix memory safety bugs — Mozilla

Mozilla upgraded several third party libraries used in media rendering to address multiple memory safety and stability bugs identified by members of the Mozilla community. Some of the bugs discovered could potentially be used by an attacker to crash a victim's browser and execute arbitrary code o...

Web fonts can be used to spoof the page address – Opera Security Advisories

In some cases, a Web font intended to be used for page content could be incorrectly used by Opera to render parts of the user interface, including the address field. This can be used by a malicious site to display a false domain name in the address field...

Pegasus Mail Client 4.51 - Remote Buffer Overflow

Pegasus Mail Client 4.51 - Remote Buffer Overflow Application: Pegasus Mail Client Platforms: Windows XP Professional SP2 Exploitation: remote BoF Date: 2009-10-06 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code Only DoS =============== 1 Introductio...