Vulnerabilities > CVE-2019-14275 - Out-of-bounds Write vulnerability in multiple products
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 | |
OS | 1 | |
OS | 2 |
Common Weakness Enumeration (CWE)
Nessus
NASL family | Debian Local Security Checks |
NASL id | DEBIAN_DLA-2073.NASL |
description | Several issues have been found in transfig, a XFig figure files converter. CVE-2018-16140 Buffer underwrite vulnerability in get_line() allows an attacker to write prior to the beginning of the buffer via a crafted .fig file. CVE-2019-14275 Stack-based buffer overflow in the calc_arrow function in bound.c. CVE-2019-19555 Stack-based buffer overflow because of an incorrect sscanf. For Debian 8 |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 133150 |
published | 2020-01-22 |
reporter | This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof. |
source | https://www.tenable.com/plugins/nessus/133150 |
title | Debian DLA-2073-1 : transfig security update |
code |
|
References
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00043.html
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00043.html
- http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00019.html
- http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00019.html
- https://lists.debian.org/debian-lts-announce/2020/01/msg00018.html
- https://lists.debian.org/debian-lts-announce/2020/01/msg00018.html
- https://sourceforge.net/p/mcj/tickets/52/
- https://sourceforge.net/p/mcj/tickets/52/