CVE-2014-1235

Debian Bug report logs - #734745 graphviz: Multiple security issues Package: graphviz; Maintainer for graphviz is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Source for graphviz is src:graphviz (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Thu, 9 Jan 2014 14:15:01 UTC Severity: grave T ...

Graphviz could be made to crash or run programs as your login if it opened a specially crafted file ...

Stack-based buffer overflow in the chkNum function in lib/cgraph/scanl in Graphviz 2340 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list" Stack-based buffer overflow in the yyerror function in lib/cgraph/scanl in Graphviz 2340 allows remote attackers to have unspecified ...

Stack-based buffer overflow in the chkNum function in lib/cgraph/scanl in Graphviz 2340 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list" Stack-based buffer overflow in the yyerror function in lib/cgraph/scanl in Graphviz 2340 allows remote attackers to have unspecified ...

Stack-based buffer overflow in the "yyerror" function in Graphviz 2340 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted file NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-0978 ...