Описание
fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.
In transfig's fig2dev 3.2.7b it is possible for an attacker to create a specially crafted file that causes a buffer overflow due to an off by one error during range checking. This leads to a denial of service, impacting availability of the program.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | transfig | Out of support scope | ||
| Red Hat Enterprise Linux 7 | transfig | Out of support scope |
Показывать по
Дополнительная информация
Статус:
5.5 Medium
CVSS3
Связанные уязвимости
fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.
fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.
fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_i ...
fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.
Уязвимость функции conv_pattern_index компонента gencgm.c утилиты для преобразования файлов с расширением .fig Fig2dev, позволяющая нарушителю вызвать отказ в обслуживании
5.5 Medium
CVSS3