CVE-2020-21532

CVE-2020-21532 affects fig2dev; the issue is a global buffer overflow in the setfigfont() function of genepic.c (vulnerable in fig2dev 3.2.7b). Debian fixed this in 1:3.2.7a-5+deb10u5, SUSE/openSUSE fixed in 3.2.8 patchlevel 8b, and OpenUK/Ubuntu advisories reference this CVE among multiple fixes...

CVE-2020-21529

CVE-2020-21529 affects fig2dev 3.2.7b, with a stack buffer overflow in bezier_spline() (genepic.c). Affected products across distros include Debian (3.2.7a-5+), Ubuntu advisories referencing fig2dev (multiple CVEs including 2020-21529), and SUSE/openSUSE, which list CVE-2020-21529 among 12 issues...

CVE-2020-21531: Buffer Copy without Checking Size of Input

fig2dev 3.2.7b contains a global buffer overflow in the convpatternindex function in gencgm.c...

fig2dev 缓冲区错误漏洞

fig2dev is used to convert .fig files to various graphics languages and formats. A stack buffer overflow vulnerability exists in the bezierspline function in genepic.c in fig2dev version 3.2.7b. No detailed vulnerability details are currently available...

CVE-2020-21531

CVE-2020-21531 affects fig2dev, specifically a global buffer overflow in conv_pattern_index() of gencgm.c in version 3.2.7b. Connected advisories confirm multiple OS vendors (Debian, Ubuntu, openSUSE/SUSE, Red Hat via Nessus notes) referencing fig2dev vulnerabilities and provide fixes in newer re...

CVE-2020-21530: Undefined Security Weakness

fig2dev 3.2.7b contains a segmentation fault in the readobjects function in read.c...

PT-2021-6715

Name of the Vulnerable Software and Affected Versions fig2dev version 3.2.7b Description The issue is related to a segmentation fault in the read objects function in read.c, which can be caused by reading beyond the valid boundaries of a data buffer. This can allow a remote attacker to cause a...

PT-2021-6493

Name of the Vulnerable Software and Affected Versions fig2dev version 3.2.7b Description The issue is related to a global buffer overflow in the setfigfont function in genepic.c. This overflow is caused by copying a buffer without checking the input data, which can be exploited by a remote attack...

PT-2021-6492

Name of the Vulnerable Software and Affected Versions fig2dev version 3.2.7b Description The issue is related to a buffer overflow in the conv pattern index function of the gencgm.c component in the fig2dev utility. This occurs due to the lack of input validation, allowing a remote attacker to...

Denial Of Service (DoS)

fig2dev is vulnerable to denial of service. The vulnerability exists due to a global buffer overflow in the shadeortintnameafterdeclarecolor in genpstricks.c which allows attackers to cause an application crash via converting a xfig file into pstricks format...

CVE-2020-21678

A global buffer overflow in the genmpwritefontmacrolatex component in genmp.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into mp format...

CVE-2020-21676

A stack-based buffer overflow in the genpstrxtext component in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into pstricks format...

CVE-2020-21675

A stack-based buffer overflow in the genptktext component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into ptk format...

CVE-2020-21684

A global buffer overflow in the putfont in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into pict2e format...

CVE-2020-21680

A stack-based buffer overflow in the putarrow component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into pict2e format...

CVE-2020-21681

A global buffer overflow in the setcolor component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into ge format...

CVE-2020-21683

A global buffer overflow in the shadeortintnameafterdeclarecolor in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into pstricks format...

fig2dev stack buffer overflow vulnerability

fig2dev is used to convert .fig files to various graphics languages and formats. A stack buffer overflow vulnerability exists in the putarrow component of genpict2e.c in fig2dev version 3.2.7b. An attacker could exploit this vulnerability to cause a denial of service by converting xfig files to...

fig2dev buffer overflow vulnerability (CNVD-2021-79766)

fig2dev is used to convert .fig files to various graphics languages and formats. A global buffer overflow vulnerability exists in putfont in genpict2e.c in fig2dev version 3.2.7b. An attacker could exploit this vulnerability to cause a denial of service by converting xfig files to pict2e format...

fig2dev buffer overflow vulnerability (CNVD-2021-79765)

fig2dev is used to convert .fig files to various graphics languages and formats. A global buffer overflow vulnerability exists in the setfill component of genge.c in fig2dev version 3.2.7b. An attacker could exploit this vulnerability to cause a denial of service by converting xfig files to ge...