Debian/fig2dev: medium 5.5
make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type.
Action: Upgrade fig2dev to 1:3.2.7b-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:3.2.7b-3 | - |
Fixed versions
| 1:3.2.7b-3 |
Sources
published · modified · JSON