Lucene search
K

507 matches found

Cvelist
Cvelist
added 2021/05/26 9:27 p.m.18 views

CVE-2021-3561

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in readobjects could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as...

6.8AI score0.00438EPSS
Exploits1References6
CVE
CVE
added 2021/05/26 9:27 p.m.189 views

CVE-2021-3561

CVE-2021-3561 refers to an Out of Bounds flaw in fig2dev (version 3.2.8a). The flaw arises from a flawed bounds check in read_objects(), which could allow a crafted input to crash the application or, in some cases, cause memory corruption, impacting integrity and availability. The connected docum...

7.1CVSS6.5AI score0.00438EPSS
Exploits1References6Affected Software1
Debian CVE
Debian CVE
added 2021/05/26 9:27 p.m.24 views

CVE-2021-3561

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in readobjects could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as...

7.1CVSS5.5AI score0.00438EPSS
Exploits1
CNNVD
CNNVD
added 2021/05/26 12:0 a.m.1 views

Xfig fig2dev 缓冲区错误漏洞

Xfig fig2dev is a tool for printing and exporting .fig format files. A buffer overflow vulnerability exists in Fig2dev version 3.2.8a, which stems from a flawed boundary check in the program's read objects function, and can be exploited by an attacker to provide crafted, malicious input that can...

7.1CVSS6AI score0.00438EPSS
Exploits1References12
RedhatCVE
RedhatCVE
added 2021/05/20 8:14 p.m.53 views

CVE-2021-3561

An Out of Bounds flaw was found in fig2dev utility within transfig. An attacker could use this flaw and provide a crafted input to readobjects probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availabilit...

7.1CVSS1.9AI score0.00438EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.2 views

The vulnerability in the read_textobject function of the read.c utility for converting .fig files in fig2dev allows a malicious actor to cause a service failure.

The vulnerability of the readtextobject function in the read.c utility for converting .fig files to fig2dev format is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

6.5CVSS6.9AI score0.00265EPSS
Exploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:0 a.m.2 views

The vulnerability of the calc_arrow function in the fig2dev file conversion tool allows a hacker to cause a service failure.

The vulnerability of the calcarrow function in the fig2dev file conversion tool is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created .fig file...

5.5CVSS6.8AI score0.00508EPSS
Exploits1References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:0 a.m.1 views

The vulnerability of the get_line() function in the .fig conversion utility for fig2dev allows a hacker to cause a service failure.

The vulnerability of the getline function in the .fig conversion utility for the fig2dev extension is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure using a specially created .fig fi...

7.8CVSS6.8AI score0.00322EPSS
Exploits0References7Affected Software4
OSV
OSV
added 2020/03/06 4:13 p.m.4 views

MGASA-2020-0116 Updated transfig packages fix security vulnerability

The updated package fixes security vulnerabilities: Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calcarrow function in bound.c. CVE-2019-14275 readtextobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf. CVE-2019-19555 makearrow...

5.5CVSS6.3AI score0.00508EPSS
Exploits4References4
Tenable Nessus
Tenable Nessus
added 2020/02/28 12:0 a.m.24 views

Amazon Linux 2 : transfig (ALAS-2020-1398)

The version of transfig installed on the remote host is prior to 3.2.7b-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1398 advisory. readcolordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write. CVE-2019-19797 makearrow in arrow.c in Xfig...

5.5CVSS6AI score0.00462EPSS
Exploits2References5
Amazon
Amazon
added 2020/02/24 12:0 a.m.30 views

Medium: transfig

Issue Overview: readcolordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write. CVE-2019-19797 makearrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type. CVE-2019-19746 Affected Packages: transfi...

5.5CVSS6AI score0.00462EPSS
Exploits2
RedhatCVE
RedhatCVE
added 2020/02/07 3:44 p.m.22 views

CVE-2019-19555

readtextobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf...

6.6CVSS3.6AI score0.00265EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2020/02/07 3:44 p.m.21 views

CVE-2019-14275

Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calcarrow function in bound.c...

6.6CVSS4.1AI score0.00508EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2019/12/30 3:9 p.m.28 views

CVE-2019-19746

makearrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type...

6.6CVSS4.5AI score0.00358EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2019/12/28 12:0 a.m.2 views

PT-2019-6181 · Fig2Dev +3 · Fig2Dev +3

Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.7b Description: A stack-based buffer overflow in the genpstrx text component in genpstricks.c of fig2dev allows attackers to cause a denial of service DOS via converting a xfig file into pstricks format. Recommendations: F...

7.1CVSS6AI score0.00678EPSS
Exploits14References78
RedhatCVE
RedhatCVE
added 2019/12/27 2:38 p.m.28 views

CVE-2019-19797

An out-of-bounds write flaw was found in transfig in the way the fig2dev program handled the processing of Fig format files. Specifically, the flaw affects the translation process of Fig codes into the box graphics language. This flaw allows for potential exploitation by crashing the fig2dev...

5.5CVSS1.8AI score0.00462EPSS
Exploits1References3
CNVD
CNVD
added 2019/12/16 12:0 a.m.1 views

Xfig fig2dev buffer overflow vulnerability

Xfig fig2dev is a tool for printing and exporting .fig format files. A buffer overflow vulnerability exists in Xfig fig2dev. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and writ...

5.5CVSS8AI score0.00462EPSS
Exploits1References1
OSV
OSV
added 2019/12/15 8:15 p.m.4 views

CVE-2019-19797

readcolordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write...

5.5CVSS6AI score
Exploits0References4
NVD
NVD
added 2019/12/15 8:15 p.m.12 views

CVE-2019-19797

readcolordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write...

5.5CVSS5.4AI score0.00462EPSS
Exploits1References4
OSV
OSV
added 2019/12/15 8:15 p.m.1 views

DEBIAN-CVE-2019-19797

readcolordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write...

5.5CVSS5.6AI score0.00462EPSS
Exploits1References1
Rows per page
Query Builder