Lucene search
Veracode Vulnerability DatabaseVERACODE:28503HistoryDec 07, 2020 - 5:57 a.m.
Arbitrary Code Execution
2020-12-0705:57:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.005 Low
EPSS
Percentile
76.4%
fontforge is vulnerable to arbitrary code execution. A heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c allows an attacker to execute arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fontforge:bullseye | eq | 1:20190801~dfsg-4 | |
| fontforge:bullseye | eq | 1:20190801~dfsg-4 |
Related
osv
osv
CVE-2020-5496
2020-01-03 22:15:13
fontforge - security update
2024-03-08 00:00:00
debiancve
debiancve
CVE-2020-5496
2020-01-03 22:15:13
ubuntucve
ubuntucve
CVE-2020-5496
2020-01-03 00:00:00
nvd
nvd
CVE-2020-5496
2020-01-03 22:15:13
redhatcve
redhatcve
CVE-2020-5496
2020-04-08 17:24:08
prion
prion
Heap overflow
2020-01-03 22:15:00
cve
cve
CVE-2020-5496
2020-01-03 22:15:13
cvelist
cvelist
CVE-2020-5496
2020-01-03 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 Security Update : fontforge (SUSE-SU-2020:0118-1)
2020-01-17 00:00:00
openSUSE Security Update : fontforge (openSUSE-2020-89)
2020-01-22 00:00:00
GLSA-202004-14 : FontForge: Multiple vulnerabilities
2020-05-01 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0057)
2022-01-28 00:00:00
openSUSE: Security Advisory for fontforge (openSUSE-SU-2020:0089_1)
2020-01-27 00:00:00
Debian: Security Advisory (DLA-3754-1)
2024-03-08 00:00:00
mageia
mageia
Updated fontforge packages fix security vulnerabilities
2020-01-28 10:52:40
suse
suse
Security update for fontforge (moderate)
2020-01-22 00:00:00
gentoo
gentoo
FontForge: Multiple vulnerabilities
2020-04-30 00:00:00
debian
debian
[SECURITY] [DLA 3754-1] fontforge security update
2024-03-07 23:12:06