Summary
It was discovered that FontForge incorrectly handled filenames. If a user or an
automated system were tricked into opening a specially crafted input file, a
remote attacker could possibly use this issue to perform a command injection.
(CVE-2024-25081)
It was discovered that FontForge incorrectly handled archives and compressed
files. If a user or an automated system were tricked into opening a specially
crafted input file, a remote attacker could possibly use this issue to perform
command injection. (CVE-2024-25082)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | fontforge | 1:20190801~dfsg-4ubuntu0.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | fontforge | 1:20201107~dfsg-4+deb11u1build0.22.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | fontforge | 20120731.b-7.1ubuntu0.1+esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | fontforge | 1:20170731~dfsg-1ubuntu0.1~esm1 |
Vulnerabilities 2
-
Medium 6.5CVE-2024-25082 Public exploit
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.
-
Medium 4.2CVE-2024-25081 Public exploit
Splinefont in FontForge through 20230101 allows command injection via crafted filenames.