Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-4228

Опубликовано: 08 дек. 2009
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:xfig:xfig:*:*:*:*:*:*:*:*
Версия до 3.2.5b (включая)
cpe:2.3:a:xfig:xfig:3.2.4:*:*:*:*:*:*:*
cpe:2.3:a:xfig:xfig:3.2.5:*:*:*:*:*:*:*

EPSS

Процентиль: 71%
0.00665
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

ubuntu
около 16 лет назад

Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c.

redhat
около 16 лет назад

Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c.

debian
около 16 лет назад

Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlie ...

github
больше 3 лет назад

Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c.

EPSS

Процентиль: 71%
0.00665
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-399