Lucene search
+L

14 matches found

RedhatCVE
RedhatCVE
•added 2017/07/26 2:50 p.m.•30 views

CVE-2017-11575

FontForge 20161012 is vulnerable to a buffer over-read in strnmatch char.c resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c...

7.8CVSS3.8AI score0.01224EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/07/24 12:00 a.m.•51 views

FontForge buffer overflow vulnerability (CNVD-2017-18536)

FontForge is an open source font editing tool that supports multiple languages. A buffer overflow vulnerability exists in strnmatch in FontForge version 20161012. An attacker can exploit this vulnerability to cause a denial of service or code execution with the help of a specially crafted otf fil...

7.8CVSS7.8AI score0.01224EPSS
SaveExploits0References1
Prion
Prion
•added 2017/07/23 10:29 p.m.•25 views

Buffer overflow

FontForge 20161012 is vulnerable to a buffer over-read in strnmatch char.c resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c...

6.8CVSS7.6AI score0.01224EPSS
SaveExploits0References2Affected Software1
osv_debian
osv_debian
•added 2017/07/23 10:29 p.m.•17 views

DEBIAN-CVE-2017-11575

FontForge 20161012 is vulnerable to a buffer over-read in strnmatch char.c resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c...

7.8CVSS7.8AI score0.01224EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2017/07/23 10:29 p.m.•30 views

CVE-2017-11575

FontForge 20161012 is vulnerable to a buffer over-read in strnmatch char.c resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c...

7.8CVSS7.2AI score
SaveExploits0References2
NVD
NVD
•added 2017/07/23 10:29 p.m.•24 views

CVE-2017-11575

FontForge 20161012 is vulnerable to a buffer over-read in strnmatch char.c resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c...

7.8CVSS7.9AI score0.01224EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/07/23 10:00 p.m.•43 views

CVE-2017-11575

FontForge 20161012 is vulnerable to a buffer over-read in strnmatch char.c resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c...

7.6AI score0.01224EPSS
SaveExploits0References2
Mend
Mend
•added 2017/07/23 10:00 p.m.•6 views

CVE-2017-11575

FontForge 20161012 is vulnerable to a buffer over-read in strnmatch char.c resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c...

8.5CVSS0.01224EPSS
SaveExploits0References5
CVE
CVE
•added 2017/07/23 10:00 p.m.•109 views

CVE-2017-11575

FontForge 20161012 is affected by CVE-2017-11575: a buffer over-read in strnmatch (char.c) can trigger DoS or code execution via a crafted OpenType font, linked to readttfcopyrights in parsettf.c. Multiple advisories confirm the issue and document fixes in later FontForge releases (e.g., updates ...

7.8CVSS7.5AI score0.01224EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2017/07/23 10:00 p.m.•56 views

CVE-2017-11575

FontForge 20161012 is vulnerable to a buffer over-read in strnmatch char.c resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c...

7.8CVSS7.9AI score0.01224EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/23 12:00 a.m.•5 views

CVE-2017-11575: Out-of-bounds Read

FontForge 20161012 is vulnerable to a buffer over-read in strnmatch char.c resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c...

7.8CVSS6.4AI score0.01224EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2017/07/23 12:00 a.m.•13 views

UBUNTU-CVE-2017-11575

FontForge 20161012 is vulnerable to a buffer over-read in strnmatch char.c resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c...

7.8CVSS7.5AI score0.01224EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2017/07/23 12:00 a.m.•29 views

CVE-2017-11575

FontForge 20161012 is vulnerable to a buffer over-read in strnmatch char.c resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c...

7.8CVSS7.4AI score0.01224EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2017/07/23 12:00 a.m.•5 views

PT-2017-12113

Name of the Vulnerable Software and Affected Versions FontForge version 20161012 Description The issue is related to a buffer over-read in the strnmatch function, located in char.c, which can result in denial of service or code execution. This occurs when processing a crafted otf file, and is...

7.8CVSS0.01363EPSS
SaveExploits0References43
Rows per page
Query Builder