831 matches found
CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
DEBIAN-CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
DEBIAN-CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
Command injection
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
UBUNTU-CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
UBUNTU-CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
Command injection
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
PT-2024-1853
Name of the Vulnerable Software and Affected Versions FontForge versions through 20230101 Description The issue allows command injection via crafted archives or compressed files. This is due to the lack of measures to neutralize special elements, which can enable an attacker to execute arbitrary...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
CVE-2024-25082
FontForge (through 20230101) is affected by CVE-2024-25081 and CVE-2024-25082, allowing shell command injection via specially crafted filenames or archives/compressed files. Public advisories from Debian (DSA-5641-1), AlmaLinux (ALSA-2024-2495 / ALSA-2024-565), and Amazon Linux (ALAS2024-2495 / A...
FontForge Security Vulnerability
FontForge is an open source font editing tool that supports multiple languages. A security vulnerability exists in FontForge 20230101 and earlier versions, which originates from allowing command injection via specially crafted filenames...