PT-2014-8857 · At&T+1 · Graphviz+1

CVE-2014-9157

·

Publicado

2014-12-03

·

Atualizado

2024-07-19

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Graphviz (affected versions not specified)
Description The issue is related to a format string vulnerability in the yyerror function in lib/cgraph/scan.l of Graphviz. This vulnerability allows remote attackers to have an unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Externally-Controlled Format String

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2014-9157
DLA-105-1
DSA-3098-1
MGASA-2014-0520
USN-2435-1

Produtos afetados

Graphviz
Ubuntu