Lucene search
+L

593 matches found

OSV
OSV
•added 2021/05/26 10:15 p.m.•12 views

UBUNTU-CVE-2021-3561

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in readobjects could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as...

7.1CVSS6.6AI score0.01178EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
•added 2021/05/26 10:15 p.m.•32 views

CVE-2021-3561

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in readobjects could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as...

7.1CVSS6.7AI score0.01178EPSS
SaveExploits1References5
Prion
Prion
•added 2021/05/26 10:15 p.m.•33 views

Design/Logic Flaw

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in readobjects could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as...

5.8CVSS6.5AI score0.01178EPSS
SaveExploits1References6Affected Software3
Cvelist
Cvelist
•added 2021/05/26 9:27 p.m.•33 views

CVE-2021-3561

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in readobjects could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as...

6.8AI score0.01178EPSS
SaveExploits1References6
Mend
Mend
•added 2021/05/26 9:27 p.m.•1 views

CVE-2021-3561

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in readobjects could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as...

7.1CVSS0.01178EPSS
SaveExploits1References11
CVE
CVE
•added 2021/05/26 9:27 p.m.•218 views

CVE-2021-3561

CVE-2021-3561 refers to an Out of Bounds flaw in fig2dev (version 3.2.8a). The flaw arises from a flawed bounds check in read_objects(), which could allow a crafted input to crash the application or, in some cases, cause memory corruption, impacting integrity and availability. The connected docum...

7.1CVSS6.5AI score0.01178EPSS
SaveExploits1References6Affected Software1
Debian CVE
Debian CVE
•added 2021/05/26 9:27 p.m.•34 views

CVE-2021-3561

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in readobjects could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as...

7.1CVSS5.5AI score0.01178EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/26 12:00 a.m.•4 views

CVE-2021-3561: Improper Restriction of Operations within the Bounds of a Memory Buffer

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in readobjects could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as...

7.1CVSS5.8AI score0.01178EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/05/26 12:00 a.m.•14 views

Xfig fig2dev 缓冲区错误漏洞

Xfig fig2dev is a tool for printing and exporting .fig format files. A buffer overflow vulnerability exists in Fig2dev version 3.2.8a, which stems from a flawed boundary check in the program's read objects function, and can be exploited by an attacker to provide crafted, malicious input that can...

7.1CVSS6AI score0.01178EPSS
SaveExploits1References12
RedhatCVE
RedhatCVE
•added 2021/05/20 8:14 p.m.•61 views

CVE-2021-3561

An Out of Bounds flaw was found in fig2dev utility within transfig. An attacker could use this flaw and provide a crafted input to readobjects probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availabilit...

7.1CVSS1.9AI score0.01178EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/04/19 12:00 a.m.•2 views

PT-2021-5755

Name of the Vulnerable Software and Affected Versions fig2dev version 3.2.8a Description A flaw was found in the read objects function of fig2dev, related to an out of bounds operation in memory. This could allow an attacker to provide crafted malicious input, causing the application to crash or...

7.1CVSS0.01178EPSS
SaveExploits1References74
BDU FSTEC
BDU FSTEC
•added 2021/03/15 12:00 a.m.•16 views

The vulnerability in the read_textobject function of the read.c utility for converting .fig files in fig2dev allows a malicious actor to cause a service failure.

The vulnerability of the readtextobject function in the read.c utility for converting .fig files to fig2dev format is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

6.5CVSS6.9AI score0.01069EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2020/07/09 12:00 a.m.•17 views

The vulnerability of the calc_arrow function in the fig2dev file conversion tool allows a hacker to cause a service failure.

The vulnerability of the calcarrow function in the fig2dev file conversion tool is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created .fig file...

5.5CVSS6.8AI score0.01241EPSS
SaveExploits1References6Affected Software4
BDU FSTEC
BDU FSTEC
•added 2020/04/29 12:00 a.m.•16 views

The vulnerability of the get_line() function in the .fig conversion utility for fig2dev allows a hacker to cause a service failure.

The vulnerability of the getline function in the .fig conversion utility for the fig2dev extension is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure using a specially created .fig fi...

7.8CVSS6.8AI score0.01431EPSS
SaveExploits0References7Affected Software4
OSV
OSV
•added 2020/03/06 4:13 p.m.•9 views

MGASA-2020-0116 Updated transfig packages fix security vulnerability

The updated package fixes security vulnerabilities: Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calcarrow function in bound.c. CVE-2019-14275 readtextobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf. CVE-2019-19555 makearrow...

5.5CVSS6.7AI score0.01241EPSS
SaveExploits4References4
Tenable Nessus
Tenable Nessus
•added 2020/02/28 12:00 a.m.•34 views

Amazon Linux 2 : transfig (ALAS-2020-1398)

The version of transfig installed on the remote host is prior to 3.2.7b-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1398 advisory. readcolordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write. CVE-2019-19797 makearrow in arrow.c in Xfig...

5.5CVSS6.5AI score0.01191EPSS
SaveExploits2References5
Amazon
Amazon
•added 2020/02/24 12:00 a.m.•40 views

Medium: transfig

Issue Overview: readcolordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write. CVE-2019-19797 makearrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type. CVE-2019-19746 Affected Packages: transfi...

5.5CVSS6.5AI score0.01191EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2020/02/07 3:44 p.m.•29 views

CVE-2019-19555

readtextobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf...

6.6CVSS3.6AI score0.01069EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/02/07 3:44 p.m.•29 views

CVE-2019-14275

Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calcarrow function in bound.c...

6.6CVSS4.1AI score0.01241EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2019/12/30 3:09 p.m.•41 views

CVE-2019-19746

makearrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type...

6.6CVSS6.7AI score0.01191EPSS
SaveExploits1References3
Rows per page
Query Builder