various vulnerabilities and exploits

(subscribe to this query)

Array index error in the parse_fond function in base/ftmac.c in FreeType prior to 2.5.4 allows remote malicious users to cause a denial of service (out-of-bounds read) or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file.

Oracle Solaris 10.0 Oracle Solaris 11.2 Debian Debian Linux 7.0 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 15.04 Freetype Freetype Opensuse Opensuse 13.1 Opensuse Opensuse 13.2

The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType prior to 2.5.4 does not properly check for an integer overflow, which allows remote malicious users to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted OpenT...

Fedoraproject Fedora 20 Fedoraproject Fedora 21 Freetype Freetype Debian Debian Linux 7.0 Opensuse Opensuse 13.1 Opensuse Opensuse 13.2 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 15.04

The tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType prior to 2.5.4 proceeds with a count-to-size association without restricting the count value, which allows remote malicious users to cause a denial of service (integer overflow and out-of-bounds read) or possibly have...

Opensuse Opensuse 13.1 Opensuse Opensuse 13.2 Oracle Solaris 10.0 Oracle Solaris 11.2 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 15.04 Debian Debian Linux 7.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Desktop 7.0

The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character).

Hp Hp-ux 9.00 Hp Hp-ux 9.01 Hp Hp-ux 9.03 Hp Hp-ux 9.04 Hp Hp-ux 9.05 Hp Hp-ux 9.06 Hp Hp-ux 9.07 Hp Hp-ux 9.08 Hp Hp-ux 9.09 Hp Hp-ux 9.10 Hp Hp-ux 10.00 Hp Hp-ux 10.10

WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated malicious user to gain administrator access to the device by performing an administrator password change on the device via...

Greenpacket Ox350 Firmware -Huawei Bm2022 Firmware -Huawei Hes-309m Firmware -Huawei Hes-319m Firmware -Huawei Hes-319m2w Firmware -Huawei Hes-339m Firmware -Mada Soho Wireless Router Firmware -Zte Ox-330p Firmware -Zyxel Max218m Firmware -Zyxel Max218m1w Firmware -Zyxel Max218mw Firmware -Zyxel Max308m Fimware -

libicu in International Components for Unicode (ICU) 3.8.1 and previous versions attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent malicious users to read from, or write to, out-of-bounds memory locations, relat...

Icu-project International Components For Unicode

Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and previous versions allows context-dependent malicious users to cause a denial of service (memory consumption) and possibly have unspecified other...

Icu-project International Components For Unicode

The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType prior to 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote malicious users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted BDF fon...

Opensuse Opensuse 13.1 Opensuse Opensuse 13.2 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 15.04 Debian Debian Linux 7.0 Oracle Solaris 10.0 Oracle Solaris 11.2 Fedoraproject Fedora 20 Fedoraproject Fedora 21

type42/t42parse.c in FreeType prior to 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote malicious users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted Type42 font.

Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 15.04 Debian Debian Linux 7.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Hpc Node 6 Redhat Enterprise Linux Hpc Node 7.0 Redhat Enterprise Linux Hpc Node Eus 7.1 Redhat Enterprise Linux Server 6.0

Multiple integer overflows in sfnt/ttcmap.c in FreeType prior to 2.5.4 allow remote malicious users to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table.

Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 15.04 Freetype Freetype Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Hpc Node 6 Redhat Enterprise Linux Hpc Node 7.0 Redhat Enterprise Linux Hpc Node Eus 7.1 Redhat Enterprise Linux Server 6.0

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook