CVE-2014-0978

Publicada em 10 jan 2014 · Atualizada em 06 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 4.9%

Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file.

Produtos afetados

n/a · n/a

Referências

https://bugs.gentoo.org/show_bug.cgi?id=497274 https://bugzilla.redhat.com/show_bug.cgi?id=1049165 http://seclists.org/oss-sec/2014/q1/28 http://seclists.org/oss-sec/2014/q1/38 http://secunia.com/advisories/55666 http://secunia.com/advisories/56244 https://exchange.xforce.ibmcloud.com/vulnerabilities/90085 https://github.com/ellson/graphviz/commit/7aaddf52cd98589fb0c3ab72a393f8411838438a https://security.gentoo.org/glsa/201702-06 http://www.debian.org/security/2014/dsa-2843 http://www.mandriva.com/security/advisories?name=MDVSA-2014:024 http://www.securityfocus.com/bid/64674