PT-2019-5480

CVE-2019-14275

Publicado

2019-07-26

Atualizado

2024-06-15

Descrição por

CVSS 3.1

5.5

Média

MétricasAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Xfig fig2dev version 3.2.7a

Description The issue is related to a buffer overflow in the calc arrow function, which can be exploited by an attacker using a specially crafted .fig file, potentially leading to a denial of service.

Recommendations For Xfig fig2dev version 3.2.7a, consider disabling the calc arrow function in the bound.c file as a temporary workaround until a patch is available.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Frederic Cambus

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-787: Out-of-bounds Write

Identificadores relacionados