CVE-2017-11575
FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2017-07-23
- Last modified
- 2024-08-05
- Weaknesses
- CWE-125
Affected products
References
- http://www.debian.org/security/2017/dsa-3958
- https://github.com/fontforge/fontforge/issues/3096
