EUVD-2017-8681

Malware in sbrugna...

EUVD-2017-3184

Malware in sbrugna...

EUVD-2017-3183

Malware in sbrugna...

EUVD-2020-18351

Malware in sbrugna...

EUVD-2017-3190

Malware in sbrugna...

EUVD-2017-3191

Malware in sbrugna...

EUVD-2017-3192

Malware in sbrugna...

EUVD-2019-6708

Malware in sbrugna...

EUVD-2017-3188

Malware in sbrugna...

EUVD-2017-3186

Malware in sbrugna...

EUVD-2017-3189

Malware in sbrugna...

EUVD-2017-3187

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2020-5496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c. CVE-2020-5496 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2020-5395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge 20190801 has a use-after-free in SFDGetFontMetaData in sfd.c. CVE-2020-5395 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2020-25690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an...

GLSA-202508-03 : FontForge: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202508-03 FontForge: Arbitrary Code Execution A vulnerabilitiy has been discovered in FontForge. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from t...

FontForge: Arbitrary Code Execution

Background FontForge is a PostScript font editor and converter. Description A vulnerabilitiy has been discovered in FontForge. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround a...

TencentOS Server 3: fontforge (TSSA-2024:0319)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0319 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Alibaba Cloud Linux 3 : 0285: fontforge (ALINUX3-SA-2024:0285)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0285 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-25081: Splinefont in FontForge...

RockyLinux 8 : fontforge (RLSA-2024:4267)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4267 advisory. fontforge: command injection via crafted filenames CVE-2024-25081 fontforge: command injection via crafted archives or compressed files CVE-2024-25082...