56 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-15278
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...
Linux Distros Unpatched Vulnerability : CVE-2025-50951
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8copy function at /fontforge/sfd.c. CVE-2025-50951 Note that Nessus relies on the...
EUVD-2017-3187
Malware in sbrugna...
EUVD-2017-3184
Malware in sbrugna...
EUVD-2017-3183
Malware in sbrugna...
EUVD-2017-3185
Malware in sbrugna...
EUVD-2017-3189
Malware in sbrugna...
EUVD-2017-3186
Malware in sbrugna...
EUVD-2017-3192
Malware in sbrugna...
EUVD-2020-18351
Malware in sbrugna...
EUVD-2017-3190
Malware in sbrugna...
EUVD-2017-3188
Malware in sbrugna...
EUVD-2017-3191
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2020-5395
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge 20190801 has a use-after-free in SFDGetFontMetaData in sfd.c. CVE-2020-5395 Note that Nessus relies on the presence of the package as reported by the...
FontForge: Arbitrary Code Execution
Background FontForge is a PostScript font editor and converter. Description A vulnerabilitiy has been discovered in FontForge. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround a...
GLSA-202508-03 : FontForge: Arbitrary Code Execution
The remote host is affected by the vulnerability described in GLSA-202508-03 FontForge: Arbitrary Code Execution A vulnerabilitiy has been discovered in FontForge. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from t...
Linux Distros Unpatched Vulnerability : CVE-2010-4259
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via ...
SUSE CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
The vulnerability of the FontForge font editing software lies in its lack of measures to neutralize special elements used in operating system commands, allowing attackers to execute arbitrary commands.
The vulnerability of the FontForge font editing software exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows an attacker to execute arbitrary commands...