CVE-2014-1235

概要

参考情報

• seclists.org/oss-sec/2014/q1/54 · Mailing List
• securityfocus.com/bid/64736 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• exchange.xforce.ibmcloud.com/vulnerabilities/90198
• ellson/graphviz commit d266bb2 · Issue Tracking
• security.gentoo.org/glsa/201702-06 · Mitigation

graphviz のその他の脆弱性

• CVE-2023-46045高 7.8Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon becaus…
• CVE-2020-18032高 7.8Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code …
• CVE-2019-11023高 8.8The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graph…
• CVE-2019-9904中 6.5An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in l…
• CVE-2018-10196中 5.5NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows r…