CVE-2010-4259

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

10.85%

Published

Dec 7, 2010

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBFontForge - '.BDF' Font File Stack Buffer Overflow (PoC)TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long CHARSET_REGISTRY header in a BDF font file.

Weaknesses (CWE)

CWE-119

Affected Products (1)

alexej_kryukov · fontforgevulnerable

References (20)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605537

ExploitPatch

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052201.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052219.html

http://openwall.com/lists/oss-security/2010/12/02/5

Exploit

http://openwall.com/lists/oss-security/2010/12/02/8

Exploit

http://secunia.com/advisories/42577

http://www.debian.org/security/2011/dsa-2253

http://www.exploit-db.com/exploits/15732

http://www.securityfocus.com/bid/45162

http://www.vupen.com/english/advisories/2010/3200

https://bugzilla.redhat.com/show_bug.cgi?id=659359

ExploitPatch

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605537

ExploitPatch

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052201.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052219.html

http://openwall.com/lists/oss-security/2010/12/02/5

Exploit

http://openwall.com/lists/oss-security/2010/12/02/8

Exploit

http://secunia.com/advisories/42577

http://www.debian.org/security/2011/dsa-2253

http://www.exploit-db.com/exploits/15732

http://www.securityfocus.com/bid/45162

KEV Catalog EPSS Scores Vendors All CVEs