831 matches found
Scientific Linux Security Update : fontforge on SL7.x x86_64 (20201001)
Security Fixes : - fontforge: out-of-bounds write in SFDGetFontMetaData function in sfd.c CVE-2020-5395 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141736; scriptversion"1.3";...
fontforge security update
CentOS Errata and Security Advisory CESA-2020:3966 An update for fontforge is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...
CentOS 7 : fontforge (RHSA-2020:3966)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3966 advisory. - FontForge 20190801 has a use-after-free in SFDGetFontMetaData in sfd.c. CVE-2020-5395 Note that Nessus has not tested for this issue but has instead relied on...
fontforge security update
20120731b-13 - Resolves:rh1790973 - CVE-2020-5395:out-of-bounds write in sfd.c...
Arbitrary Code Execution
fontforge is vulnerable to arbitrary code execution. An out-of-bounds write in SFDGetFontMetaData function in sfd.c allows an attacker to execute arbitrary code on the host OS...
Moderate: Red Hat Security Advisory: fontforge security update
An update for fontforge is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
fontforge: out-of-bounds write in SFD_GetFontMetaData function in sfd.c
An out-of-bounds write was discovered in fontforge while parsing SFD files containing very large LayerCount tokens. The flaw allows an attacker to overwrite data before a buffer allocated on the heap, thus causing the application to crash or execute arbitrary code...
RHEL 7 : fontforge (RHSA-2020:3966)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3966 advisory. FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type...
fontforge.10959.n7.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1184710 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
fontforge security update
20170731-14 - Resolves:rh1790974 - CVE-2020-5395:out-of-bounds write in sfd.c...
GLSA-202004-14 : FontForge: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202004-14 FontForge: Multiple vulnerabilities Multiple vulnerabilities have been discovered in FontForge. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a...
FontForge: Multiple vulnerabilities
Background FontForge is a PostScript font editor and converter. Description Multiple vulnerabilities have been discovered in FontForge. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted font using FontForge,...
RHEL 8 : fontforge (RHSA-2020:1921)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1921 advisory. FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type...
Moderate: Red Hat Security Advisory: fontforge security update
An update for fontforge is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
fontforge: out-of-bounds write in SFD_GetFontMetaData function in sfd.c
An out-of-bounds write was discovered in fontforge while parsing SFD files containing very large LayerCount tokens. The flaw allows an attacker to overwrite data before a buffer allocated on the heap, thus causing the application to crash or execute arbitrary code...
CVE-2020-5496
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...
Fedora: Security Advisory for fontforge (FEDORA-2020-906ee5b38d)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 31 : fontforge (2020-906ee5b38d)
another fix for rh1790042 - CVE-2020-5395:out-of-bounds write in sfd.c Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducin...
[SECURITY] Fedora 31 Update: fontforge-20190801-6.fc31
FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts...
SUSE-SU-2020:0393-1 Security update for fontforge
This update for fontforge fixes the following issues: - CVE-2020-5395: Fixed a use-after-free in SFDGetFontMetaData bsc1160220. - CVE-2020-5496: Fixed a heap-based buffer overflow in Type2NotDefSplines bsc1160236...