Lucene search
K

23 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/02/04 12:0 a.m.51 views

Apple macOS CoreText TTF Parsing Out-of-Bounds Write Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the CoreText library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing o...

7.8CVSS5.5AI score0.01748EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/02/04 12:0 a.m.37 views

Apple macOS CoreText TTF Parsing Out-of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the CoreText library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS3.6AI score0.01947EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/12/08 12:0 a.m.46 views

Apple macOS CoreText MorxLigatureSubtableBuilder TTF Parsing Out-of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the CoreText library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing o...

7.8CVSS5.3AI score0.02888EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2020/08/14 12:0 a.m.99 views

Microsoft Windows fontdrvhost Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of T...

5CVSS6.1AI score0.04264EPSS
Exploits0References1
Exploit DB
Exploit DB
added 2019/09/12 12:0 a.m.274 views

Microsoft DirectWrite - Out-of-Bounds Read in sfac_GetSbitBitmap While Processing TTF Fonts

Microsoft DirectWrite is a modern Windows API for high-quality text rendering. A majority of its code resides in the DWrite.dll user-mode library. It is used by a variety of widely used desktop programs such as web browsers and constitutes an attack surface for memory corruption bugs, as it...

7AI score
Exploits0
exploitpack
exploitpack
added 2019/08/15 12:0 a.m.30 views

Microsoft Font Subsetting - DLL Heap Corruption in MakeFormat12MergedGlyphList

Microsoft Font Subsetting - DLL Heap Corruption in MakeFormat12MergedGlyphList -----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the specific...

7.3AI score
Exploits0
exploitpack
exploitpack
added 2019/08/15 12:0 a.m.33 views

Microsoft Font Subsetting - DLL Heap Corruption in FixSbitSubTables

Microsoft Font Subsetting - DLL Heap Corruption in FixSbitSubTables -----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the specific glyphs used i...

7.3AI score
Exploits0
exploitpack
exploitpack
added 2019/08/15 12:0 a.m.30 views

Microsoft Font Subsetting - DLL Heap Corruption in ReadTableIntoStructure

Microsoft Font Subsetting - DLL Heap Corruption in ReadTableIntoStructure -----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the specific glyphs...

Exploits0
exploitpack
exploitpack
added 2019/08/15 12:0 a.m.22 views

Microsoft Font Subsetting - DLL Heap-Based Out-of-Bounds read in WriteTableFromStructure

Microsoft Font Subsetting - DLL Heap-Based Out-of-Bounds read in WriteTableFromStructure -----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the...

Exploits0
exploitpack
exploitpack
added 2019/08/15 12:0 a.m.27 views

Microsoft Font Subsetting - DLL Heap-Based Out-of-Bounds read in FixSbitSubTableFormat1

Microsoft Font Subsetting - DLL Heap-Based Out-of-Bounds read in FixSbitSubTableFormat1 -----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the...

7.3AI score
Exploits0
exploitpack
exploitpack
added 2019/08/15 12:0 a.m.29 views

Microsoft Font Subsetting - DLL Heap-Based Out-of-Bounds read in GetGlyphIdx

Microsoft Font Subsetting - DLL Heap-Based Out-of-Bounds read in GetGlyphIdx -----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the specific glyp...

7.3AI score
Exploits0
exploitpack
exploitpack
added 2019/08/15 12:0 a.m.22 views

Microsoft Font Subsetting - DLL Heap Corruption in ReadAllocFormat12CharGlyphMapList

Microsoft Font Subsetting - DLL Heap Corruption in ReadAllocFormat12CharGlyphMapList -----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the...

7.3AI score
Exploits0
Exploit DB
Exploit DB
added 2019/08/15 12:0 a.m.137 views

Microsoft Font Subsetting - DLL Heap Corruption in MakeFormat12MergedGlyphList

-----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the specific glyphs used in the document where the fonts are embedded. It is used by Windows G...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2019/08/15 12:0 a.m.177 views

Microsoft Font Subsetting - DLL Heap-Based Out-of-Bounds read in GetGlyphIdx

-----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the specific glyphs used in the document where the fonts are embedded. It is used by Windows G...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2019/08/15 12:0 a.m.311 views

Microsoft Font Subsetting - DLL Heap Corruption in ReadTableIntoStructure

-----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the specific glyphs used in the document where the fonts are embedded. It is used by Windows G...

7.4AI score
Exploits0
0day.today
0day.today
added 2019/07/12 12:0 a.m.40 views

Microsoft Font Subsetting - DLL Heap Corruption in ComputeFormat4CmapData Vulnerability

Microsoft Font Subsetting - DLL Heap Corruption in ComputeFormat4CmapData -----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the specific glyphs...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2019/07/12 12:0 a.m.22 views

Microsoft Font Subsetting - DLL Heap Corruption in ComputeFormat4CmapData

Microsoft Font Subsetting - DLL Heap Corruption in ComputeFormat4CmapData -----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the specific glyphs...

7.3AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2016/03/22 12:0 a.m.29 views

Apple OS X TTF bdat Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of TTF...

6.8CVSS2.2AI score0.03995EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2012/09/06 12:0 a.m.14 views

Mandriva Linux Security Advisory : graphite2 (MDVSA-2011:174)

Unspecified vulnerabilities were discovered in graphite2 conserning specially crafted TTF fonts and which has unknown impact. As a preemptive measure the new 1.0.3 version is being provided where this is fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

5.4AI score
Exploits0References1
securityvulns
securityvulns
added 2011/12/26 12:0 a.m.54 views

Microsoft Windows multiple security vulnerabilities

Buffer overflow on TTF fonts parsing, OLE objects memory corruption, CSRSS and kernel privilege escalations, ActiveX code execution...

9.3CVSS6.2AI score0.7851EPSS
Exploits14References2Affected Software1
Rows per page
Query Builder