CVE-2009-4228
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2009-4228
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
xfig 'u_bound.c'缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Xfig是X窗口系统所使用的绘图程序。Xfig 3.2.5b及其早期版本的u_bound.c存在栈消耗漏洞，远程攻击者可以借助在1.3文件格式中使用的一个畸形的.fig文件的一个长字符串引起一个拒绝服务 (应用程序崩溃),可能与f_read.c中的readfp_fig函数相关。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2009-4228
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-4228
Please Login to view more intelligence information
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559274x_refsource_CONFIRM
- https://bugzilla.redhat.com/show_bug.cgi?id=543905x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2009-4228
Same Patch Batch · n/a · 2009-12-08 · 21 CVEs total
| CVE-2009-4233 | Youjoomla YJ Whois 'mod_yj_whois.php'跨站脚本攻击漏洞 | |
| CVE-2009-3994 | denton_woods DevIL 'il_dicom.c' 栈缓冲溢出漏洞 | |
| CVE-2009-2843 | apple mac_os_x applets证书加密问题漏洞 | |
| CVE-2009-2749 | IBM WebSphere Application Server Communications Enabled Applications 加密问题漏洞 | |
| CVE-2009-4227 | Xfig和'f_readold.c'文件解析栈溢出漏洞 | |
| CVE-2009-4226 | sun opensolaris IP模块竞争条件错误漏洞 | |
| CVE-2009-4225 | CA eTrust PestPatrol'ppctl.dl'PestPatrol ActiveX控件栈缓冲溢出漏洞 | |
| CVE-2009-3586 | CoreHTTP 'src/http.c'单字节溢出溢出漏洞 | |
| CVE-2009-4235 | Tim_hockin acpid '/var/log/acpid'敏感信息泄露漏洞 | |
| CVE-2009-4234 | Micronet Network Access Controller 'error_user.shtml' 跨站脚本攻击漏洞 | |
| CVE-2009-1298 | linux kernel 'net/ipv4/ip_fragment.c'缓冲区溢出漏洞 | |
| CVE-2009-4232 | Jonijnm Kide Shoutbox 'index.php' 授权问题漏洞 | |
| CVE-2009-4231 | Basic-cms SweetRice 'plugins.php' 目录遍历漏洞 | |
| CVE-2009-4230 | ruven_pillay iipimage_server缓冲区溢出漏洞 | |
| CVE-2009-4229 | ActiveWebSoftwares Active Bids 多个SQL注入漏洞 | |
| CVE-2009-4033 | Tim_hockin acpid 权限许可和敏感信息泄露漏洞 | |
| CVE-2009-4236 | EC-CUBE 'LC_Page_Admin_Customer_SearchCustomer.php' 信息泄露漏洞 | |
| CVE-2009-3844 | HP OpenView Data Protector Application Recovery Manager栈缓冲区溢出漏洞 | |
| CVE-2009-1569 | Novell iPrint Client缓冲区溢出漏洞 | |
| CVE-2009-1568 | Novell iprint_client 'ienipp.ocx' 缓冲区溢出漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service - CVE-2026-8267
Open5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of s - CVE-2026-8266
Open5GS SMF gsm-build.c gsm_build_pdu_session_establishment_
V. Comments for CVE-2009-4228
No comments yet