A global buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format. Reference: https://sourceforge.net/p/mcj/tickets/77/
A DoS could be triggered via a buffer overflow due to the implementation of shading or tinting when converting to pstricks. The problem is a result of handling an unknown color when tinting or shading which lead to an incorrect offset and an eventual DoS. The patch for remediation is: https://sourceforge.net/p/mcj/fig2dev/ci/639c36010a120e97a6e82e7cd57cbf9dbf4b64f1/