Category: Security

[dos] Adobe Acrobat Reader DC for Windows – Double Free due to Malformed JP2 Stream

[dos] Adobe Acrobat Reader DC for Windows – free() of Uninitialized Pointer due to Malformed JBIG2Globals Stream

[local] Microsoft Windows Text Services Framework MSCTF – Multiple Vulnerabilities

[dos] NSKeyedUnarchiver – Info Leak in Decoding SGBigUTF8String

[dos] Adobe Acrobat CoolType (AFDKO) – Memory Corruption in the Handling of Type 1 Font load/store Operators

[dos] Adobe Acrobat CoolType (AFDKO) – Call from Uninitialized Memory due to Empty FDArray in Type 1 Fonts

[dos] Microsoft Font Subsetting – DLL Returning a Dangling Pointer via MergeFontPackage

[dos] Microsoft Font Subsetting – DLL Heap-Based Out-of-Bounds read in GetGlyphIdx

[webapps] SugarCRM Enterprise 9.0.0 – Cross-Site Scripting

[webapps] Joomla! Component JS Jobs (com_jsjobs) 1.2.5 – 'customfields.php' SQL Injection