Lucene search
K

507 matches found

Vulnrichment
Vulnrichment
added 2025/04/23 8:55 p.m.5 views

CVE-2025-46400 Xfig: fig2dev segmentation fault in read_arcobject

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via readarcobject function...

5.5CVSS4.4AI score0.00101EPSS
Exploits1References3
AlpineLinux
AlpineLinux
added 2025/04/23 8:55 p.m.6 views

CVE-2025-46400

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via readarcobject function...

5.5CVSS6.6AI score0.00101EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2025/04/23 8:55 p.m.6 views

CVE-2025-46400

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via readarcobject function...

5.5CVSS5.2AI score0.00101EPSS
Exploits1
CVE
CVE
added 2025/04/23 8:55 p.m.79 views

CVE-2025-46399

CVE-2025-46399 affects fig2dev (part of transfig) with a segmentation fault in genge_itp_spline, enabling local input-based disruption and potential denial of service. Related advisories confirm multiple vendors acknowledge the issue; Debian LTS reports a fix in fig2dev 1:3.2.8-3+deb11u3. Other e...

5.5CVSS4.6AI score0.00101EPSS
Exploits1References4Affected Software1
Debian CVE
Debian CVE
added 2025/04/23 8:55 p.m.8 views

CVE-2025-46399

A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via gengeitpspline function...

5.5CVSS5.1AI score0.00101EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2025/04/23 8:55 p.m.4 views

CVE-2025-46399 Xfig: transfig: fig2dev segmentation fault vulnerability

A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via gengeitpspline function...

5.5CVSS4.6AI score0.00101EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/04/23 8:55 p.m.11 views

CVE-2025-46399 Xfig: transfig: fig2dev segmentation fault vulnerability

A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via gengeitpspline function...

5.5CVSS0.00101EPSS
Exploits1References3
AlpineLinux
AlpineLinux
added 2025/04/23 8:55 p.m.8 views

CVE-2025-46399

A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via gengeitpspline function...

5.5CVSS6.3AI score0.00101EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/04/23 8:55 p.m.14 views

CVE-2025-46398 Xfig: fig2dev stack-overflow via read_objects

In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via readobjects function...

5.5CVSS0.00104EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/04/23 8:55 p.m.5 views

CVE-2025-46398 Xfig: fig2dev stack-overflow via read_objects

In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via readobjects function...

5.5CVSS4.7AI score0.00104EPSS
Exploits1References3
CVE
CVE
added 2025/04/23 8:55 p.m.87 views

CVE-2025-46398

CVE-2025-46398 affects fig2dev (part of xfig/Transfig). The vulnerability is a stack overflow in read_objects() that allows memory corruption via local input manipulation, exploitable by a locally authenticated user under conditions described in several advisories. Public disclosures in Debian LT...

5.5CVSS4.7AI score0.00104EPSS
Exploits1References4Affected Software1
AlpineLinux
AlpineLinux
added 2025/04/23 8:55 p.m.3 views

CVE-2025-46398

In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via readobjects function...

5.5CVSS6.8AI score0.00104EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2025/04/23 8:55 p.m.5 views

CVE-2025-46398

In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via readobjects function...

5.5CVSS5.4AI score0.00104EPSS
Exploits1
CVE
CVE
added 2025/04/23 8:55 p.m.91 views

CVE-2025-46397

CVE-2025-46397 is a vulnerability in xfig/fig2dev where a stack overflow via local input manipulation in the bezier_spline function could lead to code execution. The issue is triggered by crafted input to the utility that processes FIG/PIC figures. Public advisories (AlmaLinux, Debian LTS, Astra)...

7.8CVSS4.7AI score0.0007EPSS
Exploits1References8Affected Software2
Vulnrichment
Vulnrichment
added 2025/04/23 8:55 p.m.5 views

CVE-2025-46397 Xfig: xfig: stack-overflow allows possible code execution via local input manipulation

A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezierspline function...

7.8CVSS4.7AI score0.0007EPSS
Exploits1References7
Debian CVE
Debian CVE
added 2025/04/23 8:55 p.m.5 views

CVE-2025-46397

A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezierspline function...

7.8CVSS6.3AI score0.0007EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2025/04/23 8:55 p.m.2 views

CVE-2025-46397

A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezierspline function...

7.8CVSS4.9AI score0.0007EPSS
Exploits1References8
Cvelist
Cvelist
added 2025/04/23 8:55 p.m.15 views

CVE-2025-46397 Xfig: xfig: stack-overflow allows possible code execution via local input manipulation

A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezierspline function...

7.8CVSS0.0007EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/04/23 12:0 a.m.4 views

Sourceforge Xfig 代码问题漏洞

Sourceforge Xfig is an open source charting tool from Sourceforge. A code issue vulnerability exists in Sourceforge Xfig that stems from a stack overflow that occurs when running fig2dev, resulting in memory corruption...

5.5CVSS5.1AI score0.00104EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/04/23 12:0 a.m.2 views

PT-2025-17670

Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.9a Description: The issue allows an attacker possible code execution via local input manipulation through the read objects function. Recommendations: For fig2dev version 3.2.9a, consider restricting access to the read...

6.6CVSS5.6AI score0.00104EPSS
Exploits7References49
Rows per page
Query Builder