A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.
References
Link | Resource |
---|---|
https://sourceforge.net/p/mcj/tickets/74/ | Exploit Issue Tracking Patch Third Party Advisory |
Configurations
Information
Published : 2021-08-10 14:15
Updated : 2022-12-06 18:22
NVD link : CVE-2020-21680
Mitre link : CVE-2020-21680
JSON object : View
CWE
CWE-787
Out-of-bounds Write
Products Affected
fig2dev_project
- fig2dev