CVE-2015-3905
Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote...
Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
- Record
CVE-2015-3905- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
- Record
CVE-2015-3905- Updated
- 2026-11-02
EUVDEUVD-2015-3939 No score
Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
- Record
EUVD-2015-3939- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8h55-h9jf-42p4 No score
Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote...
Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
- Record
GHSA-8h55-h9jf-42p4- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
- Record
CVE-2015-3905- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-3905 No score
Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
- Record
DEBIAN-CVE-2015-3905- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-3905 No score
Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
- Record
UBUNTU-CVE-2015-3905- Updated
- 2026-11-02
OSVUSN-2627-1 No score
t1utils vulnerability
Jakub Wilk discovered that t1utils incorrectly handled certain malformed fonts. If a user or automated system were tricked into opening a specially crafted font, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges.
- Record
USN-2627-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
t1utilsDebian:12 |
before 1.38-4 | 1.38-4 |
t1utilsDebian:13 |
before 1.38-4 | 1.38-4 |
t1utilsDebian:14 |
before 1.38-4 | 1.38-4 |
t1utilsDebian:6.0 |
before 1.36-1+deb6u1, plus listed versions 1.36-1 |
1.36-1+deb6u1 |
t1utilsUbuntu:14.04:LTS |
before 1.37-2ubuntu1.1, plus listed versions 1.37-2ubuntu1 |
1.37-2ubuntu1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-3905 is a high vulnerability (CVSS 7.5) in T1utils Project T1utils, published May 26, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.86%, the 94th percentile. Fixed in t1utils 1.38-4.
References
github.com/kohler/t1utils/blob/master/NEWS
openwall.com/lists/oss-security/2015/05/13/9
securityfocus.com/bid/74674
Show 10 moreShow less
security.gentoo.org/glsa/201507-10
bugs.debian.org/cgi-bin/bugreport.cgi?bug=779274
bugzilla.redhat.com/show_bug.cgi?id=1218365
ubuntu.com/usn/usn-2627-1
nvd.nist.gov/vuln/detail/CVE-2015-3905
security-tracker.debian.org/tracker/CVE-2015-3905
cve.org/CVERecord?id=CVE-2015-3905