Lucene search
Veracode Vulnerability DatabaseVERACODE:6407HistoryMay 28, 2018 - 9:58 a.m.
Remote Code Execution (RCE)
2018-05-2809:58:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
28.7%
libfontforge.so is vulnerable to remote code execution (RCE) attacks. A malicious user can pass an otf file to the umodenc function in parsettf.c to cause a buffer overflow and crash the application or cause arbitrary code to be executed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libfontforge.so | eq | 1.0.0 |
Related
osv
osv
CVE-2017-11570
2017-07-23 22:29:00
cve
cve
CVE-2017-11570
2022-10-03 16:23:02
redhatcve
redhatcve
CVE-2017-11570
2017-07-26 14:49:08
ubuntucve
ubuntucve
CVE-2017-11570
2017-07-23 00:00:00
nvd
nvd
CVE-2017-11570
2017-07-23 22:29:00
cvelist
cvelist
CVE-2017-11570
2022-10-03 16:23:02
prion
prion
Buffer overflow
2017-07-23 22:29:00
debiancve
debiancve
CVE-2017-11570
2022-10-03 16:23:02
nessus
nessus
RHEL 7 : fontforge (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 6 : fontforge (Unpatched Vulnerability)
2024-06-03 00:00:00