Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-4227

Опубликовано: 08 дек. 2009
Источник: nvd
CVSS2: 6.8
EPSS Средний

Описание

Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and earlier, and in the read_textobject function in read1_3.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attackers to execute arbitrary code via a long string in a malformed .fig file that uses the 1.3 file format. NOTE: some of these details are obtained from third party information.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:xfig:xfig:*:*:*:*:*:*:*:*
Версия до 3.2.5b (включая)
cpe:2.3:a:xfig:xfig:3.2.5:*:*:*:*:*:*:*

EPSS

Процентиль: 95%
0.17017
Средний

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
около 16 лет назад

Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and earlier, and in the read_textobject function in read1_3.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attackers to execute arbitrary code via a long string in a malformed .fig file that uses the 1.3 file format. NOTE: some of these details are obtained from third party information.

redhat
около 16 лет назад

Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and earlier, and in the read_textobject function in read1_3.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attackers to execute arbitrary code via a long string in a malformed .fig file that uses the 1.3 file format. NOTE: some of these details are obtained from third party information.

debian
около 16 лет назад

Stack-based buffer overflow in the read_1_3_textobject function in f_r ...

github
больше 3 лет назад

Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and earlier, and in the read_textobject function in read1_3.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attackers to execute arbitrary code via a long string in a malformed .fig file that uses the 1.3 file format. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 95%
0.17017
Средний

6.8 Medium

CVSS2

Дефекты

CWE-119