PT-2019-5480

CVE-2019-14275

Published

2019-07-26

Updated

2024-06-15

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Xfig fig2dev version 3.2.7a

Description The issue is related to a buffer overflow in the calc arrow function, which can be exploited by an attacker using a specially crafted .fig file, potentially leading to a denial of service.

Recommendations For Xfig fig2dev version 3.2.7a, consider disabling the calc arrow function in the bound.c file as a temporary workaround until a patch is available.

Exploitability

Exploit

Fix

Impacts

Researchers

Frederic Cambus

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-787: Out-of-bounds Write

Related identifiers