cve/2015/CVE-2015-3905.md

CVE-2015-3905

Description

Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

POC

Reference

• https://github.com/kohler/t1utils/blob/master/NEWS
• https://github.com/kohler/t1utils/issues/4

Github

• https://github.com/mrash/afl-cve