CVE:CVE-2020-21534
CNNVD:CNNVD-202109-1124
Xfig fig2dev是一款用于打印和导出.fig格式文件的工具。
fig2dev存在缓冲区错误漏洞，该漏洞源于 fig2dev 3.2.7b 版本在 read.c 文件的 get_line 函数中包含全局缓冲区溢出。
solution:Upgrade xfig_project fig2dev to a higher version than 3.2.7:b,and avoid the version 3.2.7:b; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0