Lucene search

K
redosRedosROS-20240826-05
HistoryAug 26, 2024 - 12:00 a.m.

ROS-20240826-05

2024-08-2600:00:00
redos.red-soft.ru
5
fontforge
vulnerability
software
arbitrary commands
unix

CVSS3

4.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

7.3

Confidence

Low

Vulnerability in FontForge font editing software exists due to failure to take measures to
neutralization of special elements. Exploitation of the vulnerability could allow an attacker to execute
arbitrary commands

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64fontforge< 20190801-9UNKNOWN

CVSS3

4.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

7.3

Confidence

Low