Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-11572

Опубликовано: 23 июл. 2017
Источник: ubuntu
Приоритет: medium
CVSS2: 6.8
CVSS3: 7.8

Описание

FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file.

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

1:20170731~dfsg-1
cosmic

not-affected

1:20170731~dfsg-1
devel

not-affected

1:20170731~dfsg-1
esm-apps/bionic

not-affected

1:20170731~dfsg-1
esm-apps/xenial

released

20120731.b-7.1ubuntu0.1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [20120731.b-5ubuntu0.1]]
precise/esm

DNE

trusty

released

20120731.b-5ubuntu0.1
trusty/esm

DNE

trusty was released [20120731.b-5ubuntu0.1]

Показывать по

6.8 Medium

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 3.3
redhat
больше 8 лет назад

FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file.

CVSS3: 7.8
nvd
больше 8 лет назад

FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file.

CVSS3: 7.8
debian
больше 8 лет назад

FontForge 20161012 is vulnerable to a heap-based buffer over-read in r ...

CVSS3: 7.8
github
больше 3 лет назад

FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file.

suse-cvrf
больше 6 лет назад

Security update for fontforge

6.8 Medium

CVSS2

7.8 High

CVSS3