CVE-2014-1236

概要

参考情報

• osvdb.org/101851
• seclists.org/oss-sec/2014/q1/46
• seclists.org/oss-sec/2014/q1/51
• seclists.org/oss-sec/2014/q1/54
• secunia.com/advisories/55666 · Vendor Advisory
• secunia.com/advisories/56244
• debian.org/security/2014/dsa-2843
• mandriva.com/security/advisories
• securityfocus.com/bid/64737
• bugzilla.redhat.com/show_bug.cgi
• ellson/graphviz commit 1d1bdec · Exploit
• security.gentoo.org/glsa/201702-06

graphviz のその他の脆弱性

• CVE-2023-46045高 7.8Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon becaus…
• CVE-2020-18032高 7.8Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code …
• CVE-2019-11023高 8.8The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graph…
• CVE-2019-9904中 6.5An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in l…
• CVE-2018-10196中 5.5NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows r…