Lucene search
MitreCVE-2024-25081HistoryFeb 26, 2024 - 4:27 p.m.
CVE-2024-25081
2024-02-2616:27:58
CWE-77
mitre
web.nvd.nist.gov
4267
cve-2024-25081
splinefont
fontforge
command injection
nvd
CVSS3
4.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
AI Score
8.7
Confidence
High
EPSS
0
Percentile
15.5%
Splinefont in FontForge through 20230101 allows command injection via crafted filenames.
References
Related
veracode
veracode
Command Injection
2024-03-13 15:31:24
osv
osv
CVE-2024-25081
2024-02-26 16:27:58
fontforge - security update
2024-03-19 00:00:00
fontforge vulnerabilities
2024-06-27 09:52:34
ubuntucve
ubuntucve
CVE-2024-25081
2024-02-26 00:00:00
vulnrichment
vulnrichment
CVE-2024-25081
2024-02-26 00:00:00
redhatcve
redhatcve
CVE-2024-25081
2024-02-26 22:02:07
prion
prion
Command injection
2024-02-26 16:27:00
redos
redos
ROS-20240826-05
2024-08-26 00:00:00
cvelist
cvelist
CVE-2024-25081
2024-02-26 00:00:00
debiancve
debiancve
CVE-2024-25081
2024-02-26 16:27:58
nvd
nvd
CVE-2024-25081
2024-02-26 16:27:58
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-e01ef71e64)
2024-03-25 00:00:00
Ubuntu: Security Advisory (USN-6856-1)
2024-06-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0864-1)
2024-05-07 00:00:00
nessus
nessus
Amazon Linux 2 : fontforge (ALAS-2024-2495)
2024-03-18 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : fontforge (SUSE-SU-2024:0864-1)
2024-03-14 00:00:00
Debian dsa-5641 : fontforge - security update
2024-03-19 00:00:00
amazon
amazon
Medium: fontforge
2024-03-13 20:26:00
almalinux
almalinux
Moderate: fontforge security update
2024-07-02 00:00:00
ubuntu
ubuntu
FontForge vulnerabilities
2024-06-27 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: fontforge-20230101-11.fc40
2024-03-23 00:44:37
mageia
mageia
Updated fontforge packages fix security vulnerabilities
2024-03-22 03:19:51
debian
debian
[SECURITY] [DSA 5641-1] fontforge security update
2024-03-19 20:51:37
[SECURITY] [DLA 3754-1] fontforge security update
2024-03-07 23:12:06
redhat
redhat
(RHSA-2024:4267) Moderate: fontforge security update
2024-07-02 13:58:02
CVSS3
4.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
AI Score
8.7
Confidence
High
EPSS
0
Percentile
15.5%
Related for CVE-2024-25081