A global buffer overflow in the put_font in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.
References
Link | Resource |
---|---|
https://sourceforge.net/p/mcj/tickets/75/ | Exploit Issue Tracking Patch Third Party Advisory |
Configurations
Information
Published : 2021-08-10 14:15
Updated : 2022-12-06 17:55
NVD link : CVE-2020-21684
Mitre link : CVE-2020-21684
JSON object : View
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Products Affected
fig2dev_project
- fig2dev