CVE-2014-0978

Published: 1/10/2014 Last updated: 8/6/2024 Reserved: 1/7/2014

Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

conf-graphviz

Products affected (1)

Product	Vendor	Version
n/a	n/a	< 6e34b9d7caa5a4c831b74bdfed5ef86fa0c03316

References (24)

http://www.mandriva.com/security/advisories?name=MDVSA-2014:024
http://www.securityfocus.com/bid/64674
https://bugzilla.redhat.com/show_bug.cgi?id=1049165
https://security.gentoo.org/glsa/201702-06
https://github.com/ellson/graphviz/commit/7aaddf52cd98589fb0c3ab72a393f8411838438a
https://exchange.xforce.ibmcloud.com/vulnerabilities/90085
http://seclists.org/oss-sec/2014/q1/28
http://www.debian.org/security/2014/dsa-2843
https://bugs.gentoo.org/show_bug.cgi?id=497274
http://seclists.org/oss-sec/2014/q1/38
http://secunia.com/advisories/55666
http://secunia.com/advisories/56244
http://www.mandriva.com/security/advisories?name=MDVSA-2014:024
http://www.securityfocus.com/bid/64674
https://bugzilla.redhat.com/show_bug.cgi?id=1049165
https://security.gentoo.org/glsa/201702-06
https://github.com/ellson/graphviz/commit/7aaddf52cd98589fb0c3ab72a393f8411838438a
https://exchange.xforce.ibmcloud.com/vulnerabilities/90085
http://seclists.org/oss-sec/2014/q1/28
http://www.debian.org/security/2014/dsa-2843
https://bugs.gentoo.org/show_bug.cgi?id=497274
http://seclists.org/oss-sec/2014/q1/38
http://secunia.com/advisories/55666
http://secunia.com/advisories/56244