Splinefont in FontForge through 20230101 allows command injection via crafted filenames.
Platform | Package | Release Date | Advisory |
---|---|---|---|
Amazon Linux 2 - Core | fontforge | 2024-03-13 20:26 | ALAS2-2024-2495 |
Amazon Linux 2023 | fontforge | 2024-03-13 20:41 | ALAS2023-2024-565 |
Score Type | Score | Vector | |
---|---|---|---|
Amazon Linux | CVSSv3 | 4.2 | CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L |