439 matches found
PT-2021-6544 · Fig2Dev +3 · Fig2Dev +3
Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.7b Description: A global buffer overflow in the shade or tint name after declare color function in genpstricks.c allows attackers to cause a denial of service DOS via converting a xfig file into pstricks format. The issue ...
fig2dev buffer overflow vulnerability (CNVD-2021-86900)
Xfig fig2dev is a tool for printing and exporting .fig format files. A buffer overflow vulnerability exists in Fig2dev version 3.2.8a, which stems from a flawed boundary check in the program's read objects function, and can be exploited by an attacker to provide crafted, malicious input that can...
[SECURITY] Fedora 34 Update: autotrace-0.31.1-60.fc34
AutoTrace is a program for converting bitmaps to vector graphics. Supported input formats include BMP, TGA, PNM, PPM, and any format supported by ImageMagick, whereas output can be produced in Postscript, SVG, xfig, SWF, and others...
Amazon Linux 2 : transfig (ALAS-2020-1398)
The version of transfig installed on the remote host is prior to 3.2.7b-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1398 advisory. readcolordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write. CVE-2019-19797 makearrow in arrow.c in Xfig...
Medium: transfig
Issue Overview: readcolordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write. CVE-2019-19797 makearrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type. CVE-2019-19746 Affected Packages: transfi...
CVE-2019-19555
readtextobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf...
CVE-2019-14275
Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calcarrow function in bound.c...
Fedora: Security Advisory for xfig (FEDORA-2020-6a2824178e)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 31 : 1:transfig / xfig (2020-5d0f0593ae)
Security fix for CVE-2019-19746, CVE-2019-19797 - New upstream release 3.2.7b - Add patch fixing CVE-2019-19746 rhbz1787040 - Add patch fixing CVE-2019-19797 rhbz1786726 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...
Fedora 30 : 1:transfig / xfig (2020-6a2824178e)
Security fix for CVE-2019-19746, CVE-2019-19797 - New upstream release 3.2.7b - Add patch fixing CVE-2019-19746 rhbz1787040 - Add patch fixing CVE-2019-19797 rhbz1786726 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...
Fedora: Security Advisory for xfig (FEDORA-2020-5d0f0593ae)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 31 Update: xfig-3.2.7b-1.fc31
Xfig is an X Window System tool for creating basic vector graphics, including bezier curves, lines, rulers and more. The resulting graphics can be saved, printed on PostScript printers or converted to a variety of other formats e.g., X11 bitmaps, Encapsulated PostScript, LaTeX. You should install...
Debian DLA-2073-1 : transfig security update
Several issues have been found in transfig, a XFig figure files converter. CVE-2018-16140 Buffer underwrite vulnerability in getline allows an attacker to write prior to the beginning of the buffer via a crafted .fig file. CVE-2019-14275 Stack-based buffer overflow in the calcarrow function in...
[SECURITY] [DLA 2073-1] transfig security update
Package : transfig Version : 1:3.2.5.e-4+deb8u2 CVE ID : CVE-2018-16140 CVE-2019-14275 CVE-2019-19555 Several issues have been found in transfig, a XFig figure files converter. CVE-2018-16140 Buffer underwrite vulnerability in getline allows an attacker to write prior to the beginning of the buff...
CVE-2019-19746
makearrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type...
PT-2019-6180 · Fig2Dev · Fig2Dev
Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.7b Description: A global buffer overflow in the genmp writefontmacro latex component in genmp.c of fig2dev allows attackers to cause a denial of service DOS via converting a xfig file into mp format. The vulnerability is...
PT-2019-6181 · Fig2Dev +3 · Fig2Dev +3
Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.7b Description: A stack-based buffer overflow in the genpstrx text component in genpstricks.c of fig2dev allows attackers to cause a denial of service DOS via converting a xfig file into pstricks format. Recommendations: F...
Xfig fig2dev buffer overflow vulnerability
Xfig fig2dev is a tool for printing and exporting .fig format files. A buffer overflow vulnerability exists in Xfig fig2dev. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and writ...
