FontForge Bitmap Distribution Format (.BDF) Font File Stack-Based Buffer Overflow Vulnerability

Bugtraq ID:	45162
Class:	Boundary Condition Error
CVE:	CVE-2010-4259
Remote:	Yes
Local:	No
Published:	Dec 02 2010 12:00AM
Updated:	Apr 13 2015 09:35PM
Credit:	Ulrik Persson
Vulnerable:	Redhat Enterprise Linux 6 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Linux 2.0 Gentoo Linux FontForge FontForge 0.0.20100501-2 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:

FontForge Bitmap Distribution Format (.BDF) Font File Stack-Based Buffer Overflow Vulnerability

FontForge is prone to a stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker could exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

FontForge 0.0.20100501-2 is vulnerable; other versions may also be affected.

FontForge Bitmap Distribution Format (.BDF) Font File Stack-Based Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

FontForge Bitmap Distribution Format (.BDF) Font File Stack-Based Buffer Overflow Vulnerability

References:

• Product Homepage (FontForge)
  
• Bug 659359 - FontForge: Stack-based buffer overflow by processing specially-craf (Red Hat)
  
• Debian Bug report logs - #605537 fontforge: buffer overflow when opening .BDF fi (Ulrik Persson)