Lucene search
+L

103 matches found

ossfuzz
ossfuzz
added 2016/06/03 11:20 p.m.31 views

Heap-buffer-overflow in Mac_Read_sfnt_Resource

Project: https://github.com/freetype/freetype2-testing.git...

0.1AI score
SaveExploits0Affected Software1
CNVD
CNVD
added 2016/01/02 12:00 a.m.4 views

FreeType 'sfnt/ttsbit.c' Heap Buffer Overflow Vulnerability

FreeType is a C-based , high-quality and portable open source font engine library , it can be used to rasterize characters and mapped to bitmap and other font-related business support . A heap buffer overflow vulnerability exists in FreeType, which can be exploited by a remote attacker to constru...

7.6AI score
SaveExploits0References1
NVD
NVD
added 2015/12/06 1:59 a.m.19 views

CVE-2015-6781

Integer overflow in the FontData::Bound function in data/fontdata.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT...

7.5CVSS9.7AI score0.01628EPSS
SaveExploits0References10
Prion
Prion
added 2015/12/06 1:59 a.m.16 views

Integer overflow

Integer overflow in the FontData::Bound function in data/fontdata.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT...

7.5CVSS7.7AI score0.01628EPSS
SaveExploits0References10Affected Software1
OSV
OSV
added 2015/12/06 1:59 a.m.8 views

UBUNTU-CVE-2015-6781

Integer overflow in the FontData::Bound function in data/fontdata.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT...

7.5CVSS7.3AI score0.01628EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2015/12/06 1:59 a.m.27 views

CVE-2015-6781

Integer overflow in the FontData::Bound function in data/fontdata.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT...

7.5CVSS7.2AI score0.01628EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2015/12/06 1:00 a.m.29 views

CVE-2015-6781

Integer overflow in the FontData::Bound function in data/fontdata.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT...

9.6AI score0.01628EPSS
SaveExploits0References10
Debian CVE
Debian CVE
added 2015/12/06 1:00 a.m.46 views

CVE-2015-6781

Removed by vendor...

7.5CVSS8.7AI score0.01628EPSS
SaveExploits0
CNVD
CNVD
added 2015/11/24 12:00 a.m.7 views

FreeType 'sfnt/ttcmap.c' Heap Buffer Overflow Vulnerability

FreeType is the FreeType team developed a C-based , high-quality and portable open source font engine library , it can be used to rasterize the characters and mapped to bitmap and provide other font-related business support . A remote heap buffer overflow vulnerability exists in FreeType. Due to...

8AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2015/03/17 5:58 p.m.9 views

freetype: multiple integer overflows leading to buffer over-reads in cmap handling

Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service out-of-bounds read or memory corruption or possibly have unspecified other impact via a crafted cmap SFNT table...

6.8CVSS6AI score0.0385EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2015/03/17 5:58 p.m.10 views

freetype: out-of-bounds read in tt_cmap4_validate()

The ttcmap4validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted cmap SF...

7.5CVSS6AI score0.05059EPSS
SaveExploits1References4
CNVD
CNVD
added 2015/02/09 12:00 a.m.3 views

FreeType 'sfnt/ttload.c' Denial of Service Vulnerability

FreeType is the FreeType team developed a C-based , high-quality and portable open source font engine library , it can be used to rasterize the characters and mapped to bitmap and provide other font-related business support . A denial of service vulnerability exists in FreeType 'sfnt/ttload.c'...

6.8CVSS6.9AI score0.03487EPSS
SaveExploits1References1
CNVD
CNVD
added 2015/02/09 12:00 a.m.5 views

FreeType 'tt_cmap4_validate' Function Denial of Service Vulnerability

FreeType is the FreeType team developed a C-based , high-quality and portable open source font engine library , it can be used to rasterize the characters and mapped to bitmap and provide other font-related business support . A denial of service vulnerability exists in the FreeType...

7.5CVSS7AI score0.05059EPSS
SaveExploits1References1
OSV
OSV
added 2015/02/08 11:59 a.m.9 views

DEBIAN-CVE-2014-9669

Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service out-of-bounds read or memory corruption or possibly have unspecified other impact via a crafted cmap SFNT table...

6.8CVSS8AI score0.0385EPSS
SaveExploits1References1
NVD
NVD
added 2015/02/08 11:59 a.m.23 views

CVE-2014-9667

sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service integer overflow and out-of-bounds read or possibly have unspecified other impact via a crafted SFNT table...

6.8CVSS7.5AI score0.03487EPSS
SaveExploits1References14
OSV
OSV
added 2015/02/08 11:59 a.m.6 views

DEBIAN-CVE-2014-9667

sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service integer overflow and out-of-bounds read or possibly have unspecified other impact via a crafted SFNT table...

6.8CVSS7.7AI score0.03487EPSS
SaveExploits1References1
NVD
NVD
added 2015/02/08 11:59 a.m.24 views

CVE-2014-9663

The ttcmap4validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted cmap SF...

7.5CVSS7.5AI score0.05059EPSS
SaveExploits1References14
Prion
Prion
added 2015/02/08 11:59 a.m.29 views

Integer overflow

sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service integer overflow and out-of-bounds read or possibly have unspecified other impact via a crafted SFNT table...

6.8CVSS7.9AI score0.03487EPSS
SaveExploits1References14Affected Software11
Prion
Prion
added 2015/02/08 11:59 a.m.26 views

Out-of-bounds

The ttcmap4validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted cmap SF...

7.5CVSS7.7AI score0.05059EPSS
SaveExploits1References14Affected Software12
Prion
Prion
added 2015/02/08 11:59 a.m.19 views

Integer overflow

The ttsbitdecoderinit function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count-to-size association without restricting the count value, which allows remote attackers to cause a denial of service integer overflow and out-of-bounds read or possibly have unspecified other impact via ...

6.8CVSS8AI score0.04225EPSS
SaveExploits1References13Affected Software12
Rows per page
Query Builder