First published: Wed Dec 04 2019(Updated: )
read_textobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Xfig | =3.2.7-b |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2019-19555.
The severity of CVE-2019-19555 is medium.
The affected software of CVE-2019-19555 is Xfig fig2dev version 3.2.7-b.
CVE-2019-19555 is a stack-based buffer overflow vulnerability in Xfig fig2dev 3.2.7-b due to an incorrect sscanf function.
To fix CVE-2019-19555, it is recommended to update Xfig fig2dev to a version that is not affected by this vulnerability.