593 matches found
fig2dev security vulnerabilities
fig2dev is a simple tool from the Xfig open source. It is used to translate fig code from a named fig file into a specified graphics language. A security vulnerability exists in fig2dev version 3.2.9a, which stems from a floating-point exception in the getslope function that could lead to a denia...
Linux Distros Unpatched Vulnerability : CVE-2018-16140
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer underwrite vulnerability in getline read.c in fig2dev 3.2.7a allows an attacker to write prior to the beginning of the buffer via a crafted .fig file...
PT-2025-17669
Name of the Vulnerable Software and Affected Versions fig2dev version 3.2.9a Description The issue allows an attacker possible code execution via local input manipulation through the bezier spline function. Recommendations For fig2dev version 3.2.9a, consider disabling the bezier spline function...
PT-2025-17670
Name of the Vulnerable Software and Affected Versions fig2dev version 3.2.9a Description The issue allows an attacker possible code execution via local input manipulation through the read objects function. Recommendations For fig2dev version 3.2.9a, consider restricting access to the read objects...
PT-2025-17671
Name of the Vulnerable Software and Affected Versions fig2dev version 3.2.9a Description The issue is related to a segmentation fault in the fig2dev software, specifically in version 3.2.9a. This fault can be triggered by an attacker through local input manipulation via the genge itp spline...
PT-2025-17672
Name of the Vulnerable Software and Affected Versions fig2dev version 3.2.9a Description The issue is related to a segmentation fault in the fig2dev software, specifically in version 3.2.9a. This fault allows an attacker to impact availability via local input manipulation through the read arcobje...
file conversion utility Heap Buffer Overflow DoS
The vulnerability of the openstream function in the file conversion utility for files with the .fig and .fig2dev extensions is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
free_stream Memory Reclamation DoS
The vulnerability of the freestream function in the file conversion utility for files with the .fig and .fig2dev extensions is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...
Medium: transfig
Issue Overview: An out-of-bounds write flaw was found in transfig in the way the fig2dev program handled the processing of Fig format files. Specifically, the flaw affects the translation process of Fig codes into the box graphics language. This flaw allows for potential exploitation by crashing...
Denial Of Service (DoS)
fig2dev is vulnerable to Denial Of Service DoS. The vulnerability exists due to the stack-based buffer overflow in the readtextobject function of read.c, allowing an attacker to cause an application crash by passing incorrect sscanf...
Denial Of Service (DoS)
fig2dev is vulnerable to Denial Of Service DoS. The vulnerability exists due to the stack-based buffer overflow in the calcarrow function of bound.c, allowing an attacker to cause an application crash...
SUSE CVE-2017-16899
An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...
SUSE CVE-2018-16140
A buffer underwrite vulnerability in getline read.c in fig2dev 3.2.7a allows an attacker to write prior to the beginning of the buffer via a crafted .fig file...
SUSE CVE-2019-14275
Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calcarrow function in bound.c...
SUSE CVE-2019-19555
readtextobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf...
SUSE CVE-2019-19746
makearrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type...
SUSE CVE-2019-19797
readcolordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write...
SUSE CVE-2020-21530
fig2dev 3.2.7b contains a segmentation fault in the readobjects function in read.c...