{"id":"CVE-2009-4228","aliases":["DEBIAN-CVE-2009-4228","EUVD-2009-4197","GHSA-gvr2-hrmm-6ff5"],"status":"published","title":"Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers...","description":"Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01762,"percentile":0.78174,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-399"],"published":"2009-12-08T18:00:00Z","modified":"2026-10-23T17:47:46Z","affected":[{"source":"osv","ecosystem":"Debian:12","package":"xfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.2.8b-2","1:3.2.9-1","1:3.2.9-2","1:3.2.9-3","1:3.2.9-4","1:3.2.9a-1","1:3.2.9a-2","1:3.2.9a-3","1:3.2.9a-4","1:3.2.9a-5"]},{"source":"osv","ecosystem":"Debian:13","package":"xfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.2.9a-3","1:3.2.9a-4","1:3.2.9a-5"]},{"source":"osv","ecosystem":"Debian:14","package":"xfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.2.9a-3","1:3.2.9a-4","1:3.2.9a-5"]}],"products":[{"vendor":"xfig","product":"xfig"}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559274","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:010","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0108","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543905","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-4228"},{"url":"https://github.com/advisories/GHSA-gvr2-hrmm-6ff5"},{"url":"https://security-tracker.debian.org/tracker/CVE-2009-4228","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2009-4228","description":"Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c.","status":"published","published":"2009-12-08T18:00:00Z","modified":"2024-08-07T06:54:10.186Z","updated_at":"2026-11-02T14:33:24.782697Z"}],"euvd":[{"id":"EUVD-2009-4197","description":"Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c.","status":"published","published":"2009-12-08T18:00:00Z","modified":"2024-08-07T06:54:10Z","updated_at":"2026-11-03T01:39:10.681785Z"}],"ghsa":[{"id":"GHSA-gvr2-hrmm-6ff5","title":"Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers...","description":"Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c.","status":"published","published":"2022-05-02T03:52:47Z","modified":"2023-01-31T05:08:35Z","updated_at":"2026-11-02T14:49:25.675023Z"}],"nvd":[{"id":"CVE-2009-4228","description":"Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c.","status":"published","published":"2009-12-08T18:30:00.327Z","modified":"2026-06-16T23:13:17.053Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:01:37.939838Z"}],"osv":[{"id":"CVE-2009-4228","description":"Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c.","status":"published","published":"2009-12-08T18:30:00Z","modified":"2026-04-10T03:41:00.960769Z","updated_at":"2026-11-02T15:43:57.714116Z"},{"id":"DEBIAN-CVE-2009-4228","description":"Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c.","status":"published","published":"2009-12-08T18:30:00.327Z","modified":"2026-10-23T17:47:46.734172311Z","updated_at":"2026-11-02T15:45:24.013654Z"}]}}