Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-11571

Опубликовано: 23 июл. 2017
Источник: debian

Описание

FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
fontforgefixed1:20170731~dfsg-1package

Примечания

  • https://github.com/fontforge/fontforge/issues/3087

  • https://github.com/fontforge/fontforge/commit/5a0c6522682b0788fc478dd159dd6168cb5fa38b

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 8 лет назад

FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file.

CVSS3: 3.3
redhat
больше 8 лет назад

FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file.

CVSS3: 7.8
nvd
больше 8 лет назад

FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file.

CVSS3: 7.8
github
больше 3 лет назад

FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file.

suse-cvrf
больше 6 лет назад

Security update for fontforge