CVE-2014-1236

Debian Bug report logs - #734745 graphviz: Multiple security issues Package: graphviz; Maintainer for graphviz is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Source for graphviz is src:graphviz (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Thu, 9 Jan 2014 14:15:01 UTC Severity: grave T ...

Graphviz could be made to crash or run programs as your login if it opened a specially crafted file ...

Two buffer overflow vulnerabilities were reported in Graphviz, a rich collection of graph drawing tools The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2014-0978 It was discovered that user-supplied input used in the yyerror() function in lib/cgraph/scanl is not bound-checked before beeing copied ...

Stack-based buffer overflow in the chkNum function in lib/cgraph/scanl in Graphviz 2340 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list" Stack-based buffer overflow in the yyerror function in lib/cgraph/scanl in Graphviz 2340 allows remote attackers to have unspecified ...

Stack-based buffer overflow in the chkNum function in lib/cgraph/scanl in Graphviz 2340 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list" Stack-based buffer overflow in the yyerror function in lib/cgraph/scanl in Graphviz 2340 allows remote attackers to have unspecified ...

Stack-based buffer overflow in the chkNum function in lib/cgraph/scanl in Graphviz 2340 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list" ...