CVE-2015-3052 2

Vulnerability (CVE)

Enabling QR codes in Internet Explorer, or a story of a cross-platform memory disclosure

Google Project Zero researcher Mateusz Jurczyk detailed a memory disclosure vulnerability in the PostScript font engines shared by the Windows kernel ATMFD.DLL (CVE-2015-0089), Adobe Reader (CVE-2015-3049), DirectWrite and Windows Presentation Foundation...

Vulnerabilities & Patching

One font vulnerability to rule them all #1: Introducing the BLEND vulnerability

Cyber Risks Google Project Zero

Google Project Zero researcher Mateusz Jurczyk disclosed a set of font-engine vulnerabilities found in a shared PostScript Charstring interpreter, including CVE-2015-0093 (Adobe's CVE-2015-3052), a flaw in the BLEND Charstring instruction present in Adobe...

Vulnerabilities & Patching