Graphviz: User-assisted execution of arbitrary code

Background Graphviz is an open source graph visualization software. Description Roee Hay reported a stack-based buffer overflow in the pushsubg function in parser.y when processing a DOT file with a large number of Agrapht elements. Impact A remote attacker could entice a user or automated system...

SuSE 10 Security Update : graphviz (ZYPP Patch Number 5688)

This update of graphviz fixes a buffer overflow that occurs while parsing a DOT file. CVE-2008-4555 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid34506;...

openSUSE 10 Security Update : graphviz (graphviz-5690)

This update of graphviz fixes a buffer overflow that occurs while parsing a DOT file. CVE-2008-4555 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update graphviz-5690. The text description of this...

CVE-2008-4555

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

DEBIAN-CVE-2008-4555

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

CVE-2008-4555

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

CVE-2008-4555

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

CVE-2008-4555

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

Stack overflow

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

CVE-2008-4555

CVE-2008-4555 is a real vulnerability in Graphviz 2.20.2 (and possibly earlier) involving a stack-based buffer overflow in the push_subg function (parser.y, lib/graph/parser.c). A DOT file with a large number of Agraph_t elements can allow user‑assisted remote attackers to cause memory corruption...

CVE-2008-4555

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

CVE-2008-4555

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

Graphvizt图像解析远程栈缓冲区溢出漏洞

BUGTRAQ ID: 31648 CNCAN ID：CNCAN-2008100907 Graphviz是一款将简单语法描述的结构转化为图形的工具。 Graphviz图像解析引擎存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题存在于如下代码中： parser.y Graphviz 2.20.2: 34: static Agrapht Gstack32; 35: static int GSP; 45: static void pushsubgAgrapht g 46: 47: G = GstackGSP++ = g; 48:...

Fedora 7 : graphviz-2.12-10.fc7 (2008-1643)

Rebuilt to utilize system gd instead of internal copy. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 7 Update: graphviz-2.12-10.fc7

A collection of tools for the manipulation and layout of graphs as in nodes and edges, not as in barcharts...

Debian Security Advisory DSA 857-1 (graphviz)

The remote host is missing an update to graphviz announced via advisory DSA 857-1. Javier Fernandez-Sanguino Pena discovered insecure tmporary file creation in graphviz, a rich set of graph drawing tools, that can be exploited to overwrite arbitrary files by a local attacker. For the old stable...

Debian: Security Advisory (DSA-857-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2005-4803

graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues. This is the correct identifier...

CVE-2005-4803

Graphviz before 2.2.1 is vulnerable to a local privilege escalation via a symlink attack on temporary files, allowing local users to overwrite arbitrary files due to insecure temporary-file creation. The issue is correctly identified as CVE-2005-4803 (not CVE-2005-2965). Affected component: graph...

CVE-2005-4803

graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues. This is the correct identifier...