CVE-2010-4259

EPSS 10.9%

Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long CHARSET_REGISTRY header in a BDF font file.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/15732unverified exploitdbwww.exploit-db.com/exploits/15732unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605537 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052201.html http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052219.html http://openwall.com/lists/oss-security/2010/12/02/5 http://openwall.com/lists/oss-security/2010/12/02/8 https://bugzilla.redhat.com/show_bug.cgi?id=659359 http://secunia.com/advisories/42577 http://www.debian.org/security/2011/dsa-2253 http://www.exploit-db.com/exploits/15732 http://www.securityfocus.com/bid/45162 http://www.vupen.com/english/advisories/2010/3200