Описание
A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7a allows an attacker to write prior to the beginning of the buffer via a crafted .fig file.
Ссылки
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Конфигурация 2
cpe:2.3:a:fig2dev_project:fig2dev:3.2.7a:*:*:*:*:*:*:*
EPSS
Процентиль: 55%
0.00322
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-787
Связанные уязвимости
CVSS3: 7.8
ubuntu
больше 7 лет назад
A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7a allows an attacker to write prior to the beginning of the buffer via a crafted .fig file.
CVSS3: 3.3
redhat
больше 7 лет назад
A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7a allows an attacker to write prior to the beginning of the buffer via a crafted .fig file.
CVSS3: 7.8
debian
больше 7 лет назад
A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3. ...
EPSS
Процентиль: 55%
0.00322
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-787