- Home
- CVEs with nessus.description==The remote Windows host contains a version of the OpenType Font (OTF) Format Driver that is affected by two vulnerabilities :
- The driver does not properly index an array when parsing OpenType fonts, which could allow a remote attacker to run arbitrary code in kernel mode.
(CVE-2010-3956)
- The driver does not properly reset a pointer when freeing memory, resulting in a 'double free' condition, which could allow a remote attacker to run arbitrary code in kernel mode. (CVE-2010-3957)
- The driver does not properly parse the CMAP table when rendering a specially crafted OpenType font, which could allow a local attacker to run arbitrary code in kernel mode. (CVE-2010-3959)
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top