USN-5864-1: Fig2dev vulnerabilities

Frederic Cambus discovered that Fig2dev incorrectly handled certain image files. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04...

USN-5864-1 fig2dev vulnerabilities

Frederic Cambus discovered that Fig2dev incorrectly handled certain image files. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04...

Ubuntu 18.04 LTS / 20.04 LTS : Fig2dev vulnerabilities (USN-5864-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5864-1 advisory. Frederic Cambus discovered that Fig2dev incorrectly handled certain image files. If a user or an automated system were tricked into opening a...

Debian: Security Advisory (DLA-3304-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3304-1] fig2dev security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3304-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk [email protected] January 31, 2023 https://wiki.debian.org/LTS -...

DLA-3304-1 fig2dev - security update

Bulletin has no description...

Debian dla-3304 : fig2dev - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3304 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3304-1 [email protected]...

The vulnerability in the `read_objects` function of the `read.c` component of the .fig Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the readobjects function in the read.c component of the .fig conversion utility Fig2dev involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

The vulnerability of the set_fill function in the genge.c component of the Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the setfill function in the genge.c component of the Fig2dev file conversion utility is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure by converting the xfig file into the ge forma...

The vulnerability of the put_font function in the genpict2e.c component of the Fig2dev file conversion utility, related to copying buffers without checking the input data, allows a malicious actor to cause service failures.

The vulnerability of the putfont function in the genpict2e.c component of the Fig2dev file conversion utility is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service interruptions by converting xfig files into pict2e...

The vulnerability in the read_textobject function of the read.c component of the .fig Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the readtextobject function in the read.c component of the Fig2dev file conversion utility is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

The vulnerability of the get_line function in the read.c component of the Fig2dev file-formatting utility allows a attacker to cause a service failure.

The vulnerability of the getline function in the read.c component of the Fig2dev file conversion utility is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure remotely...

The vulnerability of the put_arrow() function in the genpict2e.c component of the Fig2dev file conversion utility allows a hacker to cause a service failure.

The vulnerability of the putarrow function in the genpict2e.c component of the Fig2dev file conversion utility is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure by converting an xfig file into the pict2e format...

The vulnerability of the setfigfont function in the genepic.c component of the .fig Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the setfigfont function in the genepic.c component of the .fig conversion tool for files with the .fig extension in Fig2dev relates to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service interruptions...

The vulnerability of the `shade_or_tint_name_after_declare_color` function in the `genpstricks.c` component, a utility for converting .fig files with the .fig2dev extension, allows a malicious actor to cause a service failure.

The vulnerability of the shadeortintnameafterdeclarecolor function in the genpstricks.c component, a utility for converting .fig files in the Fig2dev format, involves copying buffers without checking input data. Exploiting this vulnerability allows an attacker to cause service failure by converti...

The vulnerability of the conv_pattern_index function in the gencgm.c component of the Fig2dev file conversion tool allows a attacker to cause a service failure.

The vulnerability of the convpatternindex function in the gencgm.c component of the .fig Fig2dev file conversion tool is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

The vulnerability of the set_color function in the genge.c component of the Fig2dev file conversion utility allows a hacker to cause a service failure.

The vulnerability of the setcolor function in the genge.c utility for converting .fig files in Fig2dev involves copying buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause a service failure by converting the xfig file into the ge format...

The vulnerability of the genmp_writefontmacro_latex function in the genmp.c component of the Fig2dev file conversion utility allows a hacker to cause a service failure.

The vulnerability of the genmpwritefontmacrolatex function in the genmp.c component of the xfig conversion utility for .fig files in Fig2dev relates to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure by converting...

The vulnerability of the gencgm_start function in the gencgm.c component of the Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the gencgmstart function in the gencgm.c component of the Fig2dev file conversion tool is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

OESA-2022-1509 transfig security update

The transfig utility creates a makefile which translates FIG created by xfig or PIC figures into a specified LaTeX graphics language for example, PostScriptTM. Transfig is used to create TeX documents which are portable i.e., they can be printed in a wide variety of environments. Security Fixes: ...