CVE-2010-4259

Description

Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long CHARSET_REGISTRY header in a BDF font file.

References

http://www.vupen.com/english/advisories/2010/3200

http://www.securityfocus.com/bid/45162

http://www.exploit-db.com/exploits/15732

http://www.debian.org/security/2011/dsa-2253

http://secunia.com/advisories/42577

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052219.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052201.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3