CVE:CVE-2021-3561
CNNVD:CNNVD-202105-1769
Xfig fig2dev是一款用于打印和导出.fig格式文件的工具。
Fig2dev 3.2.8a版本存在安全漏洞，该漏洞源于程序的read objects()函数中存在有缺陷的边界检查，攻击者可利用该漏洞提供精心设计的恶意输入，导致应用程序崩溃。
solution:Upgrade fig2dev_project fig2dev to a higher version than 3.2.8:a,and avoid the version 3.2.8:a; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0