CVE-2017-11569: High severity fonts vulnerability
Published Jul 23, 2017
·Updated
FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via a crafted otf file.
Affected Software
1 affected component
FontForge FontForge=20161012
Event History
Jul 23, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-11569?
CVE-2017-11569 has a high severity rating due to its potential for causing Denial of Service or remote code execution.
2
How do I fix CVE-2017-11569?
To fix CVE-2017-11569, update to the latest version of FontForge that patches the vulnerability.
3
What versions of FontForge are affected by CVE-2017-11569?
CVE-2017-11569 specifically affects FontForge version 20161012.
4
What type of vulnerability is CVE-2017-11569?
CVE-2017-11569 is a heap-based buffer over-read vulnerability discovered in the readttfcopyrights function.
5
Can CVE-2017-11569 be exploited remotely?
Yes, CVE-2017-11569 can be exploited remotely via a crafted otf file.