CVE-2019-15785

Опубликовано: 29 авг. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.

Ссылки

https://github.com/fontforge/fontforge/commit/626f751752875a0ddd74b9e217b6f4828713573c
https://github.com/fontforge/fontforge/pull/3886
Exploit
Patch
Third Party Advisory
https://security.gentoo.org/glsa/202004-14
https://github.com/fontforge/fontforge/commit/626f751752875a0ddd74b9e217b6f4828713573c
https://github.com/fontforge/fontforge/pull/3886
Exploit
Patch
Third Party Advisory
https://security.gentoo.org/glsa/202004-14

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fontforge:fontforge:*:*:*:*:*:*:*:*

Версия до 20190801 (включая)

EPSS

Процентиль: 86%

0.02653

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2019-15785

CVSS3: 9.8

ubuntu

около 7 лет назад

FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.

CVE-2019-15785

CVSS3: 4

redhat

около 7 лет назад

FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.

CVE-2019-15785

CVSS3: 9.8

debian

около 7 лет назад

FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_L ...

GHSA-qp2p-2wx4-5vff

github

больше 4 лет назад

FontForge through 20190801 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.

ALT-PU-2020-1542

CVSS3: 9.8

altlinux

больше 6 лет назад

ALT-PU-2020-1542: package `fontforge` update to version 20200314-alt1

EPSS

Процентиль: 86%

0.02653

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119