GCVE-110-MAGEIA-2014-520

Advisory Published

Vulnetix · Advisory published December 9, 2014

Updated graphviz packages fix security vulnerability: Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vector, which are not properly handled in an error string (CVE-2014-9157).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	graphviz	2.34.0-6.1.mga4 (unaffected), 0 (affected)	—

References

Updated graphviz packages fix CVE-2014-9157

advisory

Updated graphviz packages fix CVE-2014-9157

issue

Updated graphviz packages fix CVE-2014-9157

issue

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON