Lucene search
+L

39 matches found

Prion
Prion
added 2014/01/10 5:55 p.m.20 views

Stack overflow

Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file...

9.3CVSS7.9AI score0.04886EPSS
SaveExploits1References12Affected Software1
Cvelist
Cvelist
added 2014/01/10 5:00 p.m.24 views

CVE-2014-0978

Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file...

7.8AI score0.04886EPSS
SaveExploits1References12
Debian CVE
Debian CVE
added 2014/01/10 5:00 p.m.39 views

CVE-2014-0978

Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file...

9.3CVSS7.4AI score0.04886EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:00 a.m.25 views

Scientific Linux Security Update : graphviz on SL5.x i386/x86_64

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

8.5CVSS6.4AI score0.05061EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2010/10/10 12:00 a.m.19 views

FreeBSD Ports: lftp

The remote host is missing an update to the system as announced in the referenced advisory. VID 29b7e3f4-b6a9-11df-ae63-f255a795cb21 OpenVAS Vulnerability Test $ Description: Auto generated from VID 29b7e3f4-b6a9-11df-ae63-f255a795cb21 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

7.5CVSS0.03629EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2009/12/10 12:00 a.m.15 views

Mandriva Security Advisory MDVSA-2009:254-1 (graphviz)

The remote host is missing an update to graphviz announced via advisory MDVSA-2009:254-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

8.5CVSS6.4AI score0.05061EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2009/07/21 12:00 a.m.26 views

openSUSE Security Update : graphviz (graphviz-249)

This update of graphviz fixes a buffer overflow that occurs while parsing a DOT file. CVE-2008-4555 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update graphviz-249. The text description of this...

8.5CVSS5.7AI score0.05061EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2008/11/19 12:00 a.m.13 views

Gentoo Security Advisory GLSA 200811-04 (graphviz)

The remote host is missing updates announced in advisory GLSA 200811-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5CVSS6.7AI score0.05061EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2008/11/19 12:00 a.m.24 views

Gentoo Security Advisory GLSA 200811-04 (graphviz)

The remote host is missing updates announced in advisory GLSA 200811-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

8.5CVSS0.8AI score0.05061EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2008/11/11 12:00 a.m.24 views

GLSA-200811-04 : Graphviz: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200811-04 Graphviz: User-assisted execution of arbitrary code Roee Hay reported a stack-based buffer overflow in the pushsubg function in parser.y when processing a DOT file with a large number of Agrapht elements. Impact : A remo...

8.5CVSS6.3AI score0.05061EPSS
SaveExploits1References2
securityvulns
securityvulns
added 2008/11/10 12:00 a.m.60 views

[ GLSA 200811-04 ] Graphviz: User-assisted execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200811-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

8.5CVSS7AI score0.05061EPSS
SaveExploits1
securityvulns
securityvulns
added 2008/11/10 12:00 a.m.37 views

Graphviz array index overflow

Array index overflow on DOT file with large number of Agrapht elements...

8.5CVSS3.5AI score0.05061EPSS
SaveExploits1References1Affected Software1
Gentoo Linux
Gentoo Linux
added 2008/11/09 12:00 a.m.26 views

Graphviz: User-assisted execution of arbitrary code

Background Graphviz is an open source graph visualization software. Description Roee Hay reported a stack-based buffer overflow in the pushsubg function in parser.y when processing a DOT file with a large number of Agrapht elements. Impact A remote attacker could entice a user or automated system...

8.5CVSS7.1AI score0.05061EPSS
SaveExploits1
NVD
NVD
added 2008/10/14 9:10 p.m.14 views

CVE-2008-4555

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

8.5CVSS7.9AI score0.05061EPSS
SaveExploits1References10
UbuntuCve
UbuntuCve
added 2008/10/14 9:10 p.m.15 views

CVE-2008-4555

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

8.5CVSS6.4AI score0.05061EPSS
SaveExploits1References1
Prion
Prion
added 2008/10/14 9:10 p.m.14 views

Stack overflow

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

8.5CVSS8.3AI score0.05061EPSS
SaveExploits1References10Affected Software1
ATTACKERKB
ATTACKERKB
added 2008/10/14 9:10 p.m.5 views

CVE-2008-4555

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

8.5CVSS6.4AI score0.05061EPSS
SaveExploits1References11
Cvelist
Cvelist
added 2008/10/14 8:00 p.m.28 views

CVE-2008-4555

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

7.8AI score0.05061EPSS
SaveExploits1References10
Debian CVE
Debian CVE
added 2008/10/14 8:00 p.m.23 views

CVE-2008-4555

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

8.5CVSS7.7AI score0.05061EPSS
SaveExploits1
Rows per page
Query Builder