Month: August 2019

[webapps] EyesOfNetwork 5.1 – Authenticated Remote Command Execution

[dos] Microsoft Font Subsetting – DLL Heap-Based Out-of-Bounds read in GetGlyphIdx

[dos] Microsoft Font Subsetting – DLL Returning a Dangling Pointer via MergeFontPackage

[dos] Adobe Acrobat CoolType (AFDKO) – Call from Uninitialized Memory due to Empty FDArray in Type 1 Fonts

[dos] Adobe Acrobat CoolType (AFDKO) – Memory Corruption in the Handling of Type 1 Font load/store Operators

[dos] NSKeyedUnarchiver – Info Leak in Decoding SGBigUTF8String

[local] Microsoft Windows Text Services Framework MSCTF – Multiple Vulnerabilities

[dos] Adobe Acrobat Reader DC for Windows – free() of Uninitialized Pointer due to Malformed JBIG2Globals Stream

[dos] Adobe Acrobat Reader DC for Windows – Double Free due to Malformed JP2 Stream

[dos] Microsoft Font Subsetting – DLL Double Free in MergeFormat12Cmap / MakeFormat12MergedGlyphList