CVE-2014-6262

Name of the Vulnerable Software and Affected Versions RRDtool versions prior to 4.2.5 Zenoss Core versions prior to 4.2.5

Description The issue is related to multiple format string vulnerabilities in the python module of RRDtool. These vulnerabilities can be exploited by remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash. The exploitation occurs through a crafted third argument to the rrdtool.graph function.

Recommendations For RRDtool versions prior to 4.2.5, update to version 4.2.5 or later to resolve the issue. For Zenoss Core versions prior to 4.2.5, update to version 4.2.5 or later to resolve the issue.