Veracode Vulnerability DatabaseVERACODE:31669Denial Of Service (DoS)
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.0005 Low
EPSS
Percentile
15.0%
fig2dev is vulnerable to denial of service. The vulnerability exists due to a global buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c which allows attackers to cause an application crash via converting a xfig file into pstricks format.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fig2dev:sid | eq | 1:3.2.7b-5 | |
| fig2dev:bullseye | eq | 1:3.2.7b-5 | |
| fig2dev:sid | eq | 1:3.2.7b-5 | |
| fig2dev:bullseye | eq | 1:3.2.7b-5 |
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.0005 Low
EPSS
Percentile
15.0%