CVE-2018-16140

high

Description

A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7a allows an attacker to write prior to the beginning of the buffer via a crafted .fig file.

References

https://usn.ubuntu.com/3760-1/

https://sourceforge.net/p/mcj/tickets/28/

https://lists.debian.org/debian-lts-announce/2020/01/msg00018.html

Details

Source: Mitre, NVD

Published: 2018-08-30

Updated: 2020-01-22

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High