CVE-2012-1132

freetype: heap buffer over-read in Type1 parser parse_subrs() (#35606)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted dictionary data in a Type 1 font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1133

freetype: heap buffer underflow in BDF parser _bdf_parse_glyphs() (#35607)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.

CVSS 2.0 · 9.3 Critical EPSS 4.7% KEV · Not listed

Vendors

Freetype Mozilla

Products

Freetype Firefox Mobile

CVE-2012-1137

freetype: heap buffer off-by-one in BDF parsing _bdf_list_ensure() (#35643)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1136

freetype: uninitialized pointer use in BDF parser _bdf_parse_glyphs() (#35641)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font that lacks an ENCODING field.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-1134

freetype: limited heap buffer overflow in Type1 parser T1_Get_Private_Dict() (#35608)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted private-dictionary data in a Type 1 font.

CVSS 2.0 · 9.3 Critical EPSS 4.6% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2010-3166

nsTextFrameUtils:: TransformText (MFSA 2010-53)

Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a bidirectional text run.

CVSS 2.0 · 9.3 Critical EPSS 5.6% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Seamonkey Thunderbird and 1 more

CVE-2010-3311

freetype: Input stream position error by processing Compact Font Format (CFF) font files

Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, related to an "input stream position error" issue, a different vulnerability than CVE-2010-1797.

CVSS 2.0 · 9.3 Critical EPSS 6.7% KEV · Not listed

Vendors

Freetype Redhat

Products

Freetype Enterprise Linux

CVE-2010-4253

OpenOffice.org: heap based buffer overflow in PPT import

Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file in an ODF or Microsoft Office document, as demonstrated by a PowerPoint (aka PPT) document.

CVSS 2.0 · 9.3 Critical EPSS 10.1% KEV · Not listed

Vendors

Apache Canonical Debian and 1 more

Products

Openoffice Ubuntu Linux Debian Linux and 1 more

CVE-2010-4300

Wireshark: Heap-based buffer overflow in LDSS dissector

Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an LDSS packet with a long digest line that triggers memory corruption.

CVSS 2.0 · 7.5 High EPSS 13.8% KEV · Not listed

Vendors

Redhat Wireshark

Products

Enterprise Linux Wireshark

CVE-2013-6712

php: heap-based buffer over-read in DateInterval

The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.

CVSS 2.0 · 5.0 Medium EPSS 4.6% KEV · Not listed

Vendors

Apple Canonical Debian and 3 more

Products

Mac Os X Ubuntu Linux Debian Linux and 4 more

CVE-2011-0020

pango: Heap-based buffer overflow by rendering glyph box for certain FT_Bitmap objects

Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object.

CVSS 2.0 · 7.6 High EPSS 18.9% KEV · Not listed

Vendors

Gnome Pango Redhat

Products

Pango Pango Enterprise Linux

CVE-2011-0024

wireshark: heap-based buffer overflow in wireshark < 1.2 when reading malformed capture files

Heap-based buffer overflow in wiretap/pcapng.c in Wireshark before 1.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted capture file.

CVSS 2.0 · 9.3 Critical EPSS 5.0% KEV · Not listed

Vendors

Redhat Wireshark

Products

Enterprise Linux Wireshark

CVE-2011-1006

libcgroup: Heap-based buffer overflow by converting list of controllers for given task into an array of strings

Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear whether this issue crosses privilege boundaries.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Balbir Singh Redhat

Products

Libcgroup Enterprise Linux

CVE-2011-1167

libtiff: heap-based buffer overflow in thunder decoder (ZDI-11-107)

Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER_2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value.

CVSS 2.0 · 6.8 Medium EPSS 6.2% KEV · Not listed

Vendors

Libtiff Redhat

Products

Libtiff Enterprise Linux

CVE-2011-2939

Perl decode_xs heap-based buffer overflow

Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based buffer overflow.

CVSS 2.0 · 5.1 Medium EPSS 2.6% KEV · Not listed

Vendors

Dan Kogai Perl Redhat

Products

Encode Module Perl Enterprise Linux

CVE-2011-3919

libxml2: Heap-based buffer overflow when decoding an entity reference with a long name

Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 2.5% KEV · Not listed

Vendors

Apple Debian Google and 2 more

Products

Iphone Os Mac Os X Debian Linux and 8 more

CVE-2010-2810

Lynx: Heap-based buffer overflow by processing URLs with % (percent) character in the domain name

Heap-based buffer overflow in the convert_to_idna function in WWW/Library/Implementation/HTParse.c in Lynx 2.8.8dev.1 through 2.8.8dev.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed URL containing a % (percent) character in the domain name.

CVSS 2.0 · 6.8 Medium EPSS 3.7% KEV · Not listed

Vendors

Lynx

Products

Lynx

CVE-2010-2806

FreeType: Heap-based buffer overflow by processing FontType42 fonts with negative length of SFNT strings (FT bug #30656)

Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via negative size values for certain strings in FontType42 font files, leading to a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 5.8% KEV · Not listed

Vendors

Apple Canonical Freetype and 1 more

Products

Iphone Os Mac Os X Tvos and 3 more

CVE-2010-2642

t1lib: Heap based buffer overflow in DVI file AFM font parser

Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

CVSS 2.0 · 7.6 High EPSS 14.3% KEV · Not listed

Vendors

Redhat T1lib Tug

Products

Enterprise Linux Evince T1lib and 1 more

CVE-2012-1126

freetype: heap buffer over-read in BDF parsing _bdf_is_atom() (#35597, #35598)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a BDF font.

CVSS 2.0 · 10.0 Critical EPSS 5.6% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux