medium5.5
CVE-2019-19797
read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.
Impact
read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xfig Project | Fig2dev | Version 3.2.7 |
| Fedoraproject | Fedora | Versions 30, 31 |
| Debian | Debian Linux | Version 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7XOY5NXUZ6JRBBPYA3CXWGRGQTSDVVG2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ILJM2G6NM5MMBKTT5CH23TAI6DJGNW36/
- https://sourceforge.net/p/mcj/tickets/67/
- https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7XOY5NXUZ6JRBBPYA3CXWGRGQTSDVVG2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ILJM2G6NM5MMBKTT5CH23TAI6DJGNW36/
- https://sourceforge.net/p/mcj/tickets/67/