Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-11570

Опубликовано: 23 июл. 2017
Источник: debian
EPSS Низкий

Описание

FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
fontforgeunfixedpackage

Примечания

  • https://github.com/fontforge/fontforge/issues/3097

  • Crash in GUI tool/related desktop libs, no security impact

EPSS

Процентиль: 67%
0.01276
Низкий

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 9 лет назад

FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.

CVSS3: 3.3
redhat
около 9 лет назад

FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.

CVSS3: 7.8
nvd
около 9 лет назад

FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.

CVSS3: 7.8
github
больше 4 лет назад

FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.

EPSS

Процентиль: 67%
0.01276
Низкий