Lucene search
Veracode Vulnerability DatabaseVERACODE:6406HistoryMay 28, 2018 - 8:32 a.m.
Remote Code Execution (RCE)
2018-05-2808:32:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
28.6%
libfontforge.so is vulnerable to remote code execution (RCE) attacks. A malicious user can pass a otf file to the ValidatePostScriptFontName function in parsettf.c file to cause a buffer overflow and crash the application or cause arbitrary code to be executed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libfontforge.so | eq | 1.0.0 |
Related
ubuntucve
ubuntucve
CVE-2017-11573
2017-07-23 00:00:00
prion
prion
Buffer overflow
2017-07-23 22:29:00
osv
osv
CVE-2017-11573
2017-07-23 22:29:00
nvd
nvd
CVE-2017-11573
2017-07-23 22:29:00
cvelist
cvelist
CVE-2017-11573
2022-10-03 16:23:02
cve
cve
CVE-2017-11573
2022-10-03 16:23:02
redhatcve
redhatcve
CVE-2017-11573
2017-07-26 14:50:03
debiancve
debiancve
CVE-2017-11573
2022-10-03 16:23:02
nessus
nessus
RHEL 7 : fontforge (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 6 : fontforge (Unpatched Vulnerability)
2024-06-03 00:00:00