A global buffer overflow in the set_fill component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format.
References
Link | Resource |
---|---|
https://sourceforge.net/p/mcj/tickets/72/ | Exploit Issue Tracking Patch Third Party Advisory |
Configurations
Information
Published : 2021-08-10 14:15
Updated : 2022-12-06 17:17
NVD link : CVE-2020-21682
Mitre link : CVE-2020-21682
JSON object : View
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Products Affected
fig2dev_project
- fig2dev