Lucene search

K
cve[email protected]CVE-2015-3905
HistoryJun 08, 2015 - 2:59 p.m.

CVE-2015-3905

2015-06-0814:59:11
CWE-119
web.nvd.nist.gov
34
cve-2015-3905
buffer overflow
set_cs_start function
t1disasm.c
t1utils
denial of service
remote attackers
arbitrary code
font file

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.076 Low

EPSS

Percentile

94.2%

Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Affected configurations

NVD
Node
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch14.10
Node
t1utils_projectt1utilsMatch1.38

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.076 Low

EPSS

Percentile

94.2%