Vulnerability record · CVE-2009-4228 · published 8 December 2009

CVE-2009-4228: Xfig vulnerability

XXfig · Xfig

Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c.

4.3 CVSS 2.0 Medium EPSS 1.7% · top 23.8% CWE-399 · CWE-399

4.3CVSS 2.0 base score

1.7%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

8References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

XXfig Xfig

References

Link	Tags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559274
http://www.mandriva.com/security/advisories?name=MDVSA-2011:010
http://www.vupen.com/english/advisories/2011/0108
https://bugzilla.redhat.com/show_bug.cgi?id=543905
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559274
http://www.mandriva.com/security/advisories?name=MDVSA-2011:010
http://www.vupen.com/english/advisories/2011/0108
https://bugzilla.redhat.com/show_bug.cgi?id=543905

Track CVE-2009-4228 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.8CVE-2010-4262Xfig memory buffer overflow vulnerabilityStack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code …EPSS 5.8%17 Dec 2010 6.8CVE-2009-4227Xfig memory buffer overflow vulnerabilityStack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and earlier, and in the read_textobject function in rea…EPSS 11%8 Dec 2009 4.4CVE-2009-1962Xfig link following vulnerabilityXfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps[PID], (2) xfig-pic[PID].pix, (3) …EPSS 0.33%8 Jun 2009 8.8CVE-2010-0806Microsoft Internet Explorer Peer Objects use-after-free allows remote code executionInternet Explorer 6, 6 SP1 and 7 contain a use-after-free in the Peer Objects component (iepeers.dll), where an object is accessed after deletion, le…KEVEPSS 82%analysed10 Mar 2010 5.9CVE-2018-0180Cisco IOS Login Block feature denial-of-service via crafted login attemptsMultiple flaws in the Login Enhancements (Login Block) feature of Cisco IOS Software let an unauthenticated remote attacker trigger a reload of the d…KEVEPSS 4.9%analysed28 Mar 2018 5.9CVE-2018-0179Cisco IOS Login Block feature denial-of-service flawMultiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software let an unauthenticated, remote attacker trigger a relo…KEVEPSS 4.9%analysed28 Mar 2018 6.3CVE-2018-0161Cisco IOS SNMP GET Request Causes Device RestartCisco IOS Software on certain Catalyst switches mishandles SNMP read requests for the ciscoFlashMIB object ID, causing a SYS-3-CPUHOG condition that …KEVEPSS 4.1%analysed28 Mar 2018 7.5CVE-2018-0156Cisco IOS Smart Install packet validation flaw causes device reloadCisco IOS and IOS XE Smart Install client switches fail to properly validate packet data received on TCP port 4786. An unauthenticated remote attacke…KEVEPSS 8.6%analysed28 Mar 2018

Source: NIST National Vulnerability Database (record CVE-2009-4228), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.