Lucene search

PRIOn knowledge basePRION:CVE-2009-4228

HistoryDec 08, 2009 - 6:30 p.m.

Format string

2009-12-0818:30:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

74.8%

JSON

Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c.

CPENameOperatorVersion
xfigeq3.2.5
xfigeq<= 3.2.5b
xfigeq3.2.4

Name	Operator	Version
xfig	eq	3.2.5
xfig	eq	<= 3.2.5b
xfig	eq	3.2.4

References

bugs.debian.org/cgi-bin/bugreport.cgi?bug=559274

www.mandriva.com/security/advisories?name=MDVSA-2011:010

www.vupen.com/english/advisories/2011/0108

bugzilla.redhat.com/show_bug.cgi?id=543905

6.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

74.8%

JSON

Related for PRION:CVE-2009-4228