CVE-2017-11572: High severity fonts vulnerability
Published Jul 23, 2017
·Updated
FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file.
Affected Software
1 affected component
FontForge FontForge=20161012
Remediation
Patch Available
Event History
Jul 23, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-11572?
CVE-2017-11572 is classified as a high-severity vulnerability due to its potential for causing denial of service (DoS) or enabling code execution.
2
How do I fix CVE-2017-11572?
To fix CVE-2017-11572, you should update FontForge to a patched version that resolves the buffer over-read issue.
3
What types of attacks can exploit CVE-2017-11572?
CVE-2017-11572 can be exploited through crafted OpenType Font (otf) files, leading to DoS attacks or arbitrary code execution.
4
Which versions of FontForge are affected by CVE-2017-11572?
CVE-2017-11572 affects FontForge version 20161012 specifically.
5
Is there a possibility of data breach with CVE-2017-11572?
While CVE-2017-11572 primarily causes DoS and code execution, there is a potential risk of data breaches if malicious code is executed.