CVE-2015-3905

2015-06-0814:59:11

CWE-119

debian

web.nvd.nist.gov

cve-2015-3905

buffer overflow

set_cs_start function

t1disasm.c

t1utils

denial of service

remote attackers

arbitrary code

font file

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.076

Percentile

94.2%

JSON

Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Affected configurations

Nvd

Node

canonicalubuntu_linuxMatch14.04lts

canonicalubuntu_linuxMatch14.10

Node

t1utils_projectt1utilsMatch1.38

VendorProductVersionCPE
canonicalubuntu_linux14.04cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
canonicalubuntu_linux14.10cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
t1utils_projectt1utils1.38cpe:2.3:a:t1utils_project:t1utils:1.38:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
canonical	ubuntu_linux	14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::
canonical	ubuntu_linux	14.10	cpe:2.3:o:canonical:ubuntu_linux:14.10:::::::*
t1utils_project	t1utils	1.38	cpe:2.3:a:t1utils_project:t1utils:1.38:::::::*