CVE-2017-11570

Опубликовано: 23 июл. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.

Ссылки

https://github.com/fontforge/fontforge/issues/3097
Issue Tracking
Patch
Third Party Advisory
https://github.com/fontforge/fontforge/issues/3097
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fontforge:fontforge:20161012:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.01276

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2017-11570

CVSS3: 7.8

ubuntu

около 9 лет назад

FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.

CVE-2017-11570

CVSS3: 3.3

redhat

около 9 лет назад

FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.

CVE-2017-11570

CVSS3: 7.8

debian

около 9 лет назад

FontForge 20161012 is vulnerable to a buffer over-read in umodenc (par ...

GHSA-g2x7-4952-c69x

CVSS3: 7.8

github

больше 4 лет назад

FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.

EPSS

Процентиль: 68%

0.01276

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-125