CVE-2015-3905 Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font fi...
HighCVSS 7.5
EPSS 6.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/t1utils(Debian:12) | < 1.38-4 | 1.38-4 |
| debian/t1utils(Debian:13) | < 1.38-4 | 1.38-4 |
| debian/t1utils(Debian:14) | < 1.38-4 | 1.38-4 |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| t1utils project t1utils | = 1.38 | No fix listed |
References
- Debian Security Tracker CVE-2015-3905 vendor-advisory
- USN-2627-1 vendor-advisory
- [oss-security] 20150513 CVE Request: t1utils: buffer overflow in set_cs_start mailing-list
- [oss-security] 20150522 Re: CVE Request: t1utils: buffer overflow in set_cs_start mailing-list
- 74674 vdb-entry
- bugs.debian.org exploit
- bugzilla.redhat.com
- github.com
- github.com
- github.com exploit
- GLSA-201507-10 vendor-advisory
- bugs.debian.org issue-tracking