CVE-2014-0978

CVE-2014-0978 is a stack-based buffer overflow in Graphviz 2.34.0, affecting the yyerror function in lib/cgraph/scan.l. A crafted dot file with a long line can trigger remote code execution or crash (as described in the CVE entry and corroborated by multiple advisories). Public disclosures across...

CVE-2014-0978

Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file...

CVE-2014-1236

Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list."...

CVE-2014-1236

Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list."...

DEBIAN-CVE-2014-1236

Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list."...

Stack overflow

Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list."...

CVE-2014-1236

Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list."...

CVE-2014-1236

Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list."...

CVE-2014-1236

Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list."...

CVE-2014-1236

Summary (CVE-2014-1236) : Graphviz 2.34.0 is affected by a stack-based buffer overflow in chkNum (lib/cgraph/scan.l) that can be triggered by a badly formed number or long digit list, enabling remote attackers to cause unspecified impact. Connected advisories confirm this vulnerability and note a...

PT-2014-3991

Name of the Vulnerable Software and Affected Versions Graphviz version 2.34.0 Description The issue is a stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l. This can be exploited by remote attackers via a long line in a dot file, potentially having an unspecified impact...

PT-2014-4027

Name of the Vulnerable Software and Affected Versions Graphviz version 2.34.0 Description The issue is related to a stack-based buffer overflow in the chkNum function, which can be triggered by a "badly formed number" and a "long digit list". This can allow remote attackers to have an unspecified...

CVE-2014-0978: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file...

CVE-2014-1236

Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list."...

CVE-2014-1236: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list."...

CVE-2014-0978

Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file...

CVE-2014-1235

Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted file. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-0978...

Graphviz "yyerror()"缓冲区溢出漏洞

Graphviz是开源的多平台绘图工具。 由于"yyerror"方法lib/cgraph/scan.l中的错误，攻击者可以通过一个特制的文件触发基于堆栈的缓冲区溢出。 0 Graphviz 2.x 厂商补丁： Graphviz ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请下载使用： https://github.com/ellson/graphviz/commit/7aaddf52cd98589fb0c3ab72a393f8411838438a...

Mandriva Linux Security Advisory : mediawiki (MDVSA-2013:235)

Multiple vulnerabilities has been discovered and corrected in mediawiki : Full path disclosure in MediaWiki before 1.20.7, when an invalid language is specified in ResourceLoader CVE-2013-4301. Several API modules in MediaWiki before 1.20.7 allowed anti-CSRF tokens to be accessed via JSONP...

MGASA-2013-0226 Updated mediawiki packages fix security vulnerabilities

This update provides MediaWiki 1.20.6, fixing several unspecified security issues. This replaces the MediaWiki 1.16.5 version, which has been EOL upstream for quite some time now, that was shipped with Mageia 2. MediaWiki removed the Math extension for the 1.18 release, but it is now available...