REDHAT-BUG-659676: Buffer Overflow

Published Dec 3, 2010

Updated

A stack-based buffer overflow flaw was found in the way Xfig processed certain FIG images. A remote attacker could create a FIG image with specially-crafted color definition, and trick the local, unsuspecting user into opening it, which could lead to xfig executable crash or, potentially, arbitrary code execution with the privileges of the user running the executable.

References: [1] https://bugzilla.redhat.com/showbug.cgi?id=657981

Public PoC: [2] https://bugzilla.redhat.com/attachment.cgi?id=463393

Flaw severity note: On systems with compile time buffer checks (FORTIFYSOURCE) feature enabled, the impact of this flaw is mitigated to be only crash.

Affected Software

1 affected component

Xfig Xfig

Event History

Dec 3, 2010

Data Sourced

via Red Hat·12:41 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-659676?

The severity of REDHAT-BUG-659676 is high due to the potential for remote code execution through a stack-based buffer overflow.

How do I fix REDHAT-BUG-659676?

To fix REDHAT-BUG-659676, update the Xfig application to the latest patched version provided by your distribution.

What versions of Xfig are affected by REDHAT-BUG-659676?

All versions of Xfig prior to the patch for REDHAT-BUG-659676 are affected by this vulnerability.

Can REDHAT-BUG-659676 be exploited remotely?

Yes, REDHAT-BUG-659676 can be exploited remotely if a user opens a specially-crafted FIG image file.

What are the potential consequences of REDHAT-BUG-659676?

The potential consequences of REDHAT-BUG-659676 include application crashes and possible arbitrary code execution.