« List of all CVEs

CVE-2017-9670

Published: 6/15/2017 Last updated: 9/16/2024 Reserved: 6/15/2017

An uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have unspecified other impact when a victim opens a specially crafted file.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

conf-gnuplot

Products affected (1)

Product Vendor Version
n/a n/a All versions < V3.2.17

References (2)