>> CATEGORY: Security

Microsoft Font Subsetting – DLL Heap Corruption in ComputeFormat4CmapData

Xymon 4.3.25 – useradm Command Execution (Metasploit)

Sitecore 9.0 rev 171002 – Persistent Cross-Site Scripting

SNMPc Enterprise Edition 9/10 – Mapping Filename Buffer Overflow

Microsoft Windows – Font Subsetting DLL Heap-Based Out-of-Bounds Read in MergeFonts

Mozilla Spidermonkey – Unboxed Objects Uninitialized Memory Access

Microsoft DirectWrite / AFDKO – Stack Corruption in OpenType Font Handling due to Out-of-Bounds cubeStackDepth

Microsoft DirectWrite / AFDKO – Stack Corruption in OpenType Font Handling Due to Negative cubeStackDepth

Microsoft DirectWrite / AFDKO – Stack Corruption in OpenType Font Handling Due to Negative nAxes

Microsoft DirectWrite / AFDKO – Stack-Based Buffer Overflow in do_set_weight_vector_cube for Large nAxes