SourceForge Xfig code issues and vulnerabilities

Sourceforge Xfig is an open source charting tool from Sourceforge. A code issue vulnerability exists in Sourceforge Xfig that stems from a stack overflow that occurs when running fig2dev, resulting in memory corruption...

CVE-2025-46400: NULL Pointer Dereference

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via readarcobject function...

SourceForge Xfig code issues and vulnerabilities

Sourceforge Xfig is an open source charting tool from Sourceforge. A code issue vulnerability exists in Sourceforge Xfig that stems from a stack overflow that occurs when running fig2dev, resulting in memory corruption...

PT-2025-13564

Name of the Vulnerable Software and Affected Versions xfig version 3.2.9a Description The issue is related to a heap-buffer overflow in the fig2dev component, specifically affecting the create line with spline function. This allows an attacker to impact availability via local input manipulation...

PT-2025-13563

Name of the Vulnerable Software and Affected Versions xfig fig2dev version 3.2.9a Description The issue is related to a segmentation fault in the fig2dev component of xfig, which can be triggered by manipulating local input via the put patternarc function. This can lead to a null pointer...

Linux Distros Unpatched Vulnerability : CVE-2023-45920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints. NOTE: this is disputed because it is not expected that an X applicati...

Linux Distros Unpatched Vulnerability : CVE-2019-19555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - readtextobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf. CVE-2019-19555 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2009-1962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the 1 xfig-epsPID, 2 xfig-picPID.pix, 3 xfig-picPID.err, 4...

Linux Distros Unpatched Vulnerability : CVE-2009-4227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the read13textobject function in freadold.c in Xfig 3.2.5b and earlier, and in the readtextobject function in read13.c in fig2dev...

Linux Distros Unpatched Vulnerability : CVE-2009-4228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack consumption vulnerability in ubound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service application crash via a long string ...

OPENSUSE-SU-2024:10483-1 xfig-3.2.6-1.1 on GA media

These are all security issues fixed in the xfig-3.2.6-1.1 package on the GA media of openSUSE Tumbleweed...

RHEL 4 : xfig (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Xfig, Transfig: Stack-based buffer overflow by loading malformed .FIG files CVE-2009-4228 - Xfig:...

RHEL 6 : xfig (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Xfig, Transfig: Stack-based buffer overflow by loading malformed .FIG files CVE-2009-4228 - Xfig:...

Mageia: Security Advisory (MGASA-2024-0125)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2024-0125 Updated xfig packages fix security vulnerability

Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints. CVE-2023-45920...

Updated xfig packages fix security vulnerability

Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints. CVE-2023-45920...

SUSE SLES12 Security Update : xfig (SUSE-SU-2024:1196-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1196-1 advisory. - CVE-2023-45920: Fixed NULL pointer dereference when calling XGetWMHints bsc1222057. Tenable has extracted the preceding description block...

SUSE-SU-2024:1196-1 Security update for xfig

This update for xfig fixes the following issues: - CVE-2023-45920: Fixed NULL pointer dereference when calling XGetWMHints bsc1222057...

NULL Pointer Dereference

xfig is vulnerable to NULL Pointer Dereference. The vulnerability is caused due to improper handling of the XGetWMHints function. The vulnerability allows an attacker to crash the application by exploiting the NULL pointer dereference condition with specially crafted input...

SUSE CVE-2023-45920

Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints. NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server or window manager...