Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-9157

Опубликовано: 03 дек. 2014
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:a:graphviz:graphviz:*:*:*:*:*:*:*:*
Версия до 2.42.4 (исключая)

EPSS

Процентиль: 92%
0.05569
Низкий

7.5 High

CVSS2

Дефекты

CWE-134

Связанные уязвимости

ubuntu
больше 11 лет назад

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.

redhat
больше 11 лет назад

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.

debian
больше 11 лет назад

Format string vulnerability in the yyerror function in lib/cgraph/scan ...

suse-cvrf
больше 8 лет назад

Security update for graphviz

github
около 4 лет назад

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.

EPSS

Процентиль: 92%
0.05569
Низкий

7.5 High

CVSS2

Дефекты

CWE-134