831 matches found
DSA-5641-1 fontforge - security update
Bulletin has no description...
Amazon Linux 2 : fontforge (ALAS-2024-2495)
The version of fontforge installed on the remote host is prior to 20120731b-13. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2495 advisory. Splinefont in FontForge through 20230101 allows command injection via crafted filenames. CVE-2024-25081 Splinefont ...
Medium: fontforge
Issue Overview: Splinefont in FontForge through 20230101 allows command injection via crafted filenames. CVE-2024-25081 Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files. CVE-2024-25082 Affected Packages: fontforge Note: This advisory is...
Medium: fontforge
Issue Overview: Splinefont in FontForge through 20230101 allows command injection via crafted filenames. CVE-2024-25081 Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files. CVE-2024-25082 Affected Packages: fontforge Note: This advisory is...
SUSE SLES12 Security Update : fontforge (SUSE-SU-2024:0863-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0863-1 advisory. - CVE-2024-25081: Fixed command injection via crafted filenames bsc1220404. - CVE-2024-25082: Fixed command injection via crafted...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : fontforge (SUSE-SU-2024:0864-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0864-1 advisory. - CVE-2024-25081: Fixed command injection via crafted filenames bsc1220404. - CVE-2024-25082:...
Command Injection
fontforge is vulnerable to Command Injection.The vulnerability is due to improper handling of crafted archives or compressed files...
Command Injection
FontForge is vulnerable to Command Injection. The vulnerability is due to insufficient input validation, which enables malicious actors to manipulate filenames in a way that triggers the execution of unintended commands...
SUSE-SU-2024:0864-1 Security update for fontforge
This update for fontforge fixes the following issues: - CVE-2024-25081: Fixed command injection via crafted filenames bsc1220404. - CVE-2024-25082: Fixed command injection via crafted archives or compressed files bsc1220405...
SUSE-SU-2024:0863-1 Security update for fontforge
This update for fontforge fixes the following issues: - CVE-2024-25081: Fixed command injection via crafted filenames bsc1220404. - CVE-2024-25082: Fixed command injection via crafted archives or compressed files bsc1220405...
DLA-3754-1 fontforge - security update
Bulletin has no description...
Debian: Security Advisory (DLA-3754-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3754-1] fontforge security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3754-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 08, 2024 https://wiki.debian.org/LTS -...
Debian dla-3754 : fontforge - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3754 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3754-1 [email protected]...
OESA-2024-1228 fontforge security update
FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts. Security Fixes: Splinefont in FontForge through 20230101 allows command...
SUSE CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
SUSE CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
The vulnerability of the FontForge font editing software lies in its lack of measures to neutralize special elements used in operating system commands, allowing attackers to execute arbitrary commands.
The vulnerability of the FontForge font editing software exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
The vulnerability of the FontForge font editing software lies in its lack of measures to neutralize special elements used in operating system commands, allowing attackers to execute arbitrary commands.
The vulnerability of the FontForge font editing software exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
