[Bug 1475392] New: CVE-2017-11574 fontforge: Heap-based buffer overflow in readcffset function

https://bugzilla.redhat.com/show_bug.cgi?id=1475392

Bug ID: 1475392
           Summary: CVE-2017-11574 fontforge: Heap-based buffer overflow
                    in readcffset function
           Product: Security Response
         Component: vulnerability
          Keywords: Security
          Severity: low
          Priority: low
          Assignee: [e-mail]
          Reporter: [e-mail]
                CC: [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail]

FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset
(parsettf.c) resulting in DoS via a crafted otf file.

Upstream issue:

https://github.com/fontforge/fontforge/issues/3090