Lucene search
+L

430 matches found

Mageia
Mageia
•added 2017/12/25 11:16 a.m.•42 views

Updated transfig package fix security vulnerability

An out-of-bounds read flaw was found in the way fig2dev program in Xfig handled the processing of Fig format files. This flaw could potentially be used to crash the fig2dev program by tricking it into processing specially crafted Fig format files CVE-2017-16899...

7.1CVSS1.2AI score0.0135EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/11/21 9:20 a.m.•29 views

CVE-2017-16899

An out-of-bounds read flaw was found in the way fig2dev program in Xfig handled the processing of Fig format files. This flaw could potentially be used to crash the fig2dev program by tricking it into processing specially crafted Fig format files...

7.1CVSS1.5AI score0.0135EPSS
SaveExploits0References1
osv-cve
osv-cve
•added 2017/11/20 6:29 p.m.•13 views

CVE-2017-16899

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...

7.1CVSS6.6AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2017/11/20 6:29 p.m.•22 views

CVE-2017-16899

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...

7.1CVSS6.8AI score0.0135EPSS
SaveExploits0References1
osv-debian
osv-debian
•added 2017/11/20 6:29 p.m.•11 views

DEBIAN-CVE-2017-16899

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...

7.1CVSS6.5AI score0.0135EPSS
SaveExploits0References1
Prion
Prion
•added 2017/11/20 6:29 p.m.•25 views

Format string

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...

5.8CVSS6.6AI score0.0135EPSS
SaveExploits0References1Affected Software2
Mend
Mend
•added 2017/11/20 6:00 p.m.•4 views

CVE-2017-16899

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...

7.1CVSS0.0135EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2017/11/20 6:00 p.m.•77 views

CVE-2017-16899

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...

7.1CVSS6.7AI score0.0135EPSS
SaveExploits0
Cvelist
Cvelist
•added 2017/11/20 6:00 p.m.•61 views

CVE-2017-16899

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...

6.6AI score0.0135EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2017/11/20 12:00 a.m.•4 views

PT-2017-14628

Name of the Vulnerable Software and Affected Versions Xfig version 3.2.6a Description The issue is related to an array index error in the fig2dev program, which can be exploited by remote attackers using a maliciously crafted Fig format file. This can lead to a denial-of-service attack or...

7.1CVSS0.0135EPSS
SaveExploits0References26
Positive Technologies
Positive Technologies
•added 2017/11/17 12:00 a.m.•2 views

PT-2017-3935

Name of the Vulnerable Software and Affected Versions fig2dev version 3.2.7a Description A buffer underwrite issue in the get line function allows an attacker to write prior to the beginning of the buffer via a crafted .fig file, potentially leading to a denial of service. The vulnerability is...

7.8CVSS0.01431EPSS
SaveExploits0References39
Tenable Nessus
Tenable Nessus
•added 2015/03/25 12:00 a.m.•47 views

Fedora 21 : xen-4.4.1-16.fc21 (2015-3944)

Additional patch for XSA-98 on arm64 HVM qemu unexpectedly enabling emulated VGA graphics backends XSA-119, CVE-2015-2152 Hypervisor memory corruption due to x86 emulator flaw XSA-123, CVE-2015-2151 enable building pngs from fig files which is working again, fix oxenstored.service preset...

7.2CVSS7.2AI score0.00548EPSS
SaveExploits0References9
OpenVAS
OpenVAS
•added 2012/08/30 12:00 a.m.•29 views

Fedora Update for transfig FEDORA-2012-11718

Check for the Version of transfig OpenVAS Vulnerability Test Fedora Update for transfig FEDORA-2012-11718 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

6.8CVSS5.9AI score0.11499EPSS
SaveExploits2References2
securityvulns
securityvulns
•added 2011/01/19 12:00 a.m.•35 views

Xfig multiple security vulnerabilities

Multiple vulnerabilities on .fig files processing...

6.8CVSS5.9AI score0.11499EPSS
SaveExploits3References1Affected Software1
osv-debian
osv-debian
•added 2010/12/17 7:00 p.m.•7 views

DEBIAN-CVE-2010-4262

Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a FIG image with a crafted color definition...

6.8CVSS6.7AI score0.0582EPSS
SaveExploits1References1
NVD
NVD
•added 2010/12/17 7:00 p.m.•21 views

CVE-2010-4262

Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a FIG image with a crafted color definition...

6.8CVSS7.8AI score0.0582EPSS
SaveExploits1References10
UbuntuCve
UbuntuCve
•added 2010/12/17 7:00 p.m.•28 views

CVE-2010-4262

Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a FIG image with a crafted color definition...

6.8CVSS6.3AI score0.0582EPSS
SaveExploits1References1
Prion
Prion
•added 2010/12/17 7:00 p.m.•54 views

Stack overflow

Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a FIG image with a crafted color definition...

6.8CVSS8.6AI score0.0582EPSS
SaveExploits1References10Affected Software1
Cvelist
Cvelist
•added 2010/12/17 6:00 p.m.•44 views

CVE-2010-4262

Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a FIG image with a crafted color definition...

7.8AI score0.0582EPSS
SaveExploits1References10
Debian CVE
Debian CVE
•added 2010/12/17 6:00 p.m.•61 views

CVE-2010-4262

Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a FIG image with a crafted color definition...

6.8CVSS7.5AI score0.0582EPSS
SaveExploits1
Rows per page
Query Builder