CVE-2019-14275
published 2019-07-26CVE-2019-14275: Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.
PriorityP424medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
1.24%
65.6th percentile
Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | fig2dev | < fig2dev 1:3.2.7a-7 (bookworm) | fig2dev 1:3.2.7a-7 (bookworm) |
| fig2dev_project | fig2dev | >= 0 < 1:3.2.7a-7 | 1:3.2.7a-7 |
| fig2dev_project | fig2dev | >= 0 < 1:3.2.7a-7 | 1:3.2.7a-7 |
| fig2dev_project | fig2dev | >= 0 < 1:3.2.7a-7 | 1:3.2.7a-7 |
| fig2dev_project | fig2dev | >= 0 < 1:3.2.7a-7 | 1:3.2.7a-7 |
| fig2dev_project | fig2dev | >= 0 < 1:3.2.6a-6ubuntu1.1 | 1:3.2.6a-6ubuntu1.1 |
| fig2dev_project | fig2dev | >= 0 < 1:3.2.7a-7ubuntu0.1 | 1:3.2.7a-7ubuntu0.1 |
| opensuse | leap | — | — |
| opensuse | leap | — | — |
| xfig_project | fig2dev | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
vendor_ubuntu5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
fig2dev vulnerabilities
osv·2023-02-13·CVSS 5.5
CVE-2019-14275 [MEDIUM] fig2dev vulnerabilities
fig2dev vulnerabilities
Frederic Cambus discovered that Fig2dev incorrectly handled certain image
files. If a user or an automated system were tricked into opening a certain
specially crafted input file, a remote attacker could possibly use this issue
to cause a denial of service. This issue only affected Ubuntu 18.04 LTS.
(CVE-2019-14275)
It was discovered that Fig2dev incorrectly handled certain image files. If
a user or an automated system were tricked into opening a certain specially
crafted input file, a remote attacker could possibly use this issue to cause
a denial of service. (CVE-2019-19555, CVE-2019-19797, CVE-2020-21529,
CVE-2020-21530, CVE-2020-21531, CVE-2020-21532, CVE-2020-21533,
CVE-2020-21534, CVE-2020-21535, CVE-2020-21675, CVE-2020-21676,
CVE-2021-3561)
It was discove
GHSA
GHSA-3cjq-m2rg-gw63: Xfig fig2dev 3
ghsa_unreviewed·2022-05-24
CVE-2019-14275 [MEDIUM] CWE-787 GHSA-3cjq-m2rg-gw63: Xfig fig2dev 3
Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.
OSV
CVE-2019-14275: Xfig fig2dev 3
osv·2019-07-26·CVSS 5.5
CVE-2019-14275 [MEDIUM] CVE-2019-14275: Xfig fig2dev 3
Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.
Ubuntu
Fig2dev vulnerabilities
vendor_ubuntu·2023-02-13·CVSS 5.5
CVE-2019-19797 [MEDIUM] Fig2dev vulnerabilities
Title: Fig2dev vulnerabilities
Summary: Several security issues were fixed in Fig2dev.
Frederic Cambus discovered that Fig2dev incorrectly handled certain image
files. If a user or an automated system were tricked into opening a certain
specially crafted input file, a remote attacker could possibly use this issue
to cause a denial of service. This issue only affected Ubuntu 18.04 LTS.
(CVE-2019-14275)
It was discovered that Fig2dev incorrectly handled certain image files. If
a user or an automated system were tricked into opening a certain specially
crafted input file, a remote attacker could possibly use this issue to cause
a denial of service. (CVE-2019-19555, CVE-2019-19797, CVE-2020-21529,
CVE-2020-21530, CVE-2020-21531, CVE-2020-21532, CVE-2020-21533,
CVE-2020-21534, CVE-2020-21535
Red Hat
transfig: stack-based buffer overflow in calc_arrow in bound.c
vendor_redhat·2019-07-26·CVSS 5.5
CVE-2019-14275 [MEDIUM] CWE-121 transfig: stack-based buffer overflow in calc_arrow in bound.c
transfig: stack-based buffer overflow in calc_arrow in bound.c
Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.
Package: transfig (Red Hat Enterprise Linux 5) - Out of support scope
Package: transfig (Red Hat Enterprise Linux 6) - Out of support scope
Package: transfig (Red Hat Enterprise Linux 7) - Fix deferred
Package: transfig (Red Hat Enterprise Linux 8) - Fix deferred
Debian
CVE-2019-14275: fig2dev - Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function...
vendor_debian·2019·CVSS 5.5
CVE-2019-14275 [MEDIUM] CVE-2019-14275: fig2dev - Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function...
Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.
Scope: local
bookworm: resolved (fixed in 1:3.2.7a-7)
bullseye: resolved (fixed in 1:3.2.7a-7)
forky: resolved (fixed in 1:3.2.7a-7)
sid: resolved (fixed in 1:3.2.7a-7)
trixie: resolved (fixed in 1:3.2.7a-7)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2019-14275 transfig: stack-based buffer overflow in calc_arrow in bound.c
bugzilla·2020-02-07·CVSS 5.5
CVE-2019-14275 [MEDIUM] CVE-2019-14275 transfig: stack-based buffer overflow in calc_arrow in bound.c
CVE-2019-14275 transfig: stack-based buffer overflow in calc_arrow in bound.c
Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.
Reference:
https://sourceforge.net/p/mcj/tickets/52/
Discussion:
Created transfig tracking bugs for this issue:
Affects: fedora-all [bug 1800635]
---
Patch:
https://sourceforge.net/p/mcj/fig2dev/ci/03ea4578258d2d9ca1ceb080e469ad261db39ef0/
Bugzilla
CVE-2019-14275 transfig: stack-based buffer overflow in calc_arrow in bound.c [fedora-all]
bugzilla·2020-02-07·CVSS 5.5
CVE-2019-14275 [MEDIUM] CVE-2019-14275 transfig: stack-based buffer overflow in calc_arrow in bound.c [fedora-all]
CVE-2019-14275 transfig: stack-based buffer overflow in calc_arrow in bound.c [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple suppo
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00043.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-11/msg00019.htmlhttps://lists.debian.org/debian-lts-announce/2020/01/msg00018.htmlhttps://sourceforge.net/p/mcj/tickets/52/http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00043.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-11/msg00019.htmlhttps://lists.debian.org/debian-lts-announce/2020/01/msg00018.htmlhttps://sourceforge.net/p/mcj/tickets/52/
2019-07-26
Published