Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-46400

Опубликовано: 23 апр. 2025
Источник: debian
EPSS Низкий

Описание

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
fig2devfixed1:3.2.9a-3package

Примечания

  • https://bugzilla.redhat.com/show_bug.cgi?id=2362054

  • https://sourceforge.net/p/mcj/tickets/187/

  • Error covered with: https://sourceforge.net/p/mcj/fig2dev/ci/1e5515a1ea2ec8651cf85ab5000d026bb962492a/

  • Fixed by: https://sourceforge.net/p/mcj/fig2dev/ci/c4465e0d9af89d9738aad31c2d0873ac1fa03c96/

  • Crash in CLI tool, no security impact

EPSS

Процентиль: 3%
0.00019
Низкий

Связанные уязвимости

CVSS3: 4.7
ubuntu
4 месяца назад

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.

CVSS3: 4.7
redhat
4 месяца назад

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.

CVSS3: 4.7
nvd
4 месяца назад

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.

CVSS3: 7.1
github
4 месяца назад

Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via read_arcobject function.

suse-cvrf
2 месяца назад

Security update for transfig

EPSS

Процентиль: 3%
0.00019
Низкий