Command injection

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

UBUNTU-CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

UBUNTU-CVE-2024-25082

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

FontForge Security Vulnerability

FontForge is an open source font editing tool that supports multiple languages. A security vulnerability exists in FontForge 20230101 and earlier versions, which stems from a command injection allowed via specially crafted archives or compressed files...

FontForge Security Vulnerability

FontForge is an open source font editing tool that supports multiple languages. A security vulnerability exists in FontForge 20230101 and earlier versions, which originates from allowing command injection via specially crafted filenames...

CVE-2024-25082

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

PT-2024-1853

Name of the Vulnerable Software and Affected Versions FontForge versions through 20230101 Description The issue allows command injection via crafted archives or compressed files. This is due to the lack of measures to neutralize special elements, which can enable an attacker to execute arbitrary...

PT-2024-1850

Name of the Vulnerable Software and Affected Versions FontForge versions through 20230101 Description The issue exists due to the lack of neutralization of special elements in the software. This can allow an attacker to execute arbitrary commands via crafted filenames. The estimated number of...

CVE-2024-25082

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25082

The Splinefont component in FontForge (versions through 20230101 ) is vulnerable to command injection when processing crafted archives or compressed files (TAR, ZIP, GZ, BZ2). The root cause is that the software constructs shell commands using filenames from archive entries without proper sanitiz...

CVE-2024-25081

The Splinefont component in FontForge versions up to 20230101 is vulnerable to command injection due to a lack of sanitization when processing crafted filenames. An attacker can trigger this by opening a file with a malicious name that includes shell metacharacters, such as a semicolon (;), which...

CVE-2024-25082

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25082

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25082

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25082: Improper Neutralization of Special Elements used in a Command

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...