xfig records
4 published records for vendor xfig.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 75%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-399 Resource Management Errors1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2009-4227Proof of concept | Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and earlier, and in the read_textobject functixfig · xfig · CWE-119 | Medium6.8 | — | 11.4% | Dec 8, 2009 |
29Monitor | CVE-2010-4262No exploit | Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrxfig · xfig · CWE-119 | Medium6.8 | — | 5.8% | Dec 17, 2010 |
18Monitor | CVE-2009-4228No exploit | Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crxfig · xfig · CWE-399 | Medium4.3 | — | 1.7% | Dec 8, 2009 |
17Monitor | CVE-2009-1962No exploit | Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps[PID], (2) xfig-pic[PID].xfig · xfig · CWE-59 | Medium4.4 | — | 0.3% | Jun 7, 2009 |
- CVE-2009-422730Monitor
Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and earlier, and in the read_textobject functi
MediumCVSS 6.8Proof of conceptEPSS 11%xfig · xfigDec 8, 2009
- CVE-2010-426229Monitor
Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitr
MediumCVSS 6.8No exploitEPSS 5%xfig · xfigDec 17, 2010
- CVE-2009-422818Monitor
Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application cr
MediumCVSS 4.3No exploitEPSS 1%xfig · xfigDec 8, 2009
- CVE-2009-196217Monitor
Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps[PID], (2) xfig-pic[PID].
MediumCVSS 4.4No exploitEPSS 0%xfig · xfigJun 7, 2009