>> TAG: #0day

Sitecore 9.0 rev 171002 – Persistent Cross-Site Scripting

SNMPc Enterprise Edition 9/10 – Mapping Filename Buffer Overflow

Microsoft Windows – Font Subsetting DLL Heap-Based Out-of-Bounds Read in MergeFonts

Mozilla Spidermonkey – Unboxed Objects Uninitialized Memory Access

Microsoft DirectWrite / AFDKO – Stack Corruption in OpenType Font Handling due to Out-of-Bounds cubeStackDepth

Microsoft DirectWrite / AFDKO – Stack Corruption in OpenType Font Handling Due to Negative cubeStackDepth

Microsoft DirectWrite / AFDKO – Stack Corruption in OpenType Font Handling Due to Negative nAxes

Microsoft DirectWrite / AFDKO – Stack-Based Buffer Overflow in do_set_weight_vector_cube for Large nAxes

Microsoft DirectWrite / AFDKO – Use of Uninitialized Memory While Freeing Resources in var_loadavar

Microsoft DirectWrite / AFDKO – Interpreter Stack Underflow in OpenType Font Handling Due to Missing CHKUFLOW