FontForge buffer overflow
Published:		08.06.2011
Source:		BUGTRAQ
SecurityVulns ID:		11719
Type:		local
Level:		3/10
Description:		Buffer overflow on BDF files parsing.

CVE:

CVE-2010-4259 (Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long CHARSET_REGISTRY header in a BDF font file.)

Original document

DEBIAN, [SECURITY] [DSA 2253-1] fontforge security update (08.06.2011)

Discuss:

Read or add your comments to this news (0 comments)