Summary
It was discovered that transfig incorrectly handled certain FIG files.
An attacker could possibly use this to execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | transfig | 1:3.2.5.e-1ubuntu1.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | transfig | 1:3.2.5.e-5ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7a allows an attacker to write prior to the beg…
References
-
report
https://ubuntu.com/security/CVE-2018-16140