CVE-2019-19797: Medium severity fig2dev vulnerability

Published Dec 15, 2019

Updated

readcolordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.

Affected Software

4 affected components

Xfig Project Fig2dev=3.2.7-b

Fedoraproject Fedora=30

Fedoraproject Fedora=31

Debian Debian Linux=9.0

Event History

Dec 15, 2019

CVE Published

via MITRE·07:53 PM

Data Sourced

via MITRE·07:53 PM

Description

Frequently Asked Questions

What is CVE-2019-19797?

CVE-2019-19797 is a vulnerability in Xfig fig2dev 3.2.7b that allows an out-of-bounds write in the read_colordef function in read.c.

What is the severity of CVE-2019-19797?

CVE-2019-19797 has a severity rating of 5.5 (medium).

How does CVE-2019-19797 affect Xfig fig2dev?

CVE-2019-19797 affects Xfig fig2dev 3.2.7b by enabling an out-of-bounds write in the read_colordef function in read.c.

How can I fix CVE-2019-19797 in Xfig fig2dev?

To fix CVE-2019-19797 in Xfig fig2dev, you should update to version 3.2.7c or later.

Are there any references for CVE-2019-19797?

Yes, here are some references for CVE-2019-19797: [Link 1](https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html), [Link 2](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7XOY5NXUZ6JRBBPYA3CXWGRGQTSDVVG2/), [Link 3](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ILJM2G6NM5MMBKTT5CH23TAI6DJGNW36/)