Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-9157

Опубликовано: 03 дек. 2014
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:a:graphviz:graphviz:*:*:*:*:*:*:*:*
Версия до 2.42.4 (исключая)

EPSS

Процентиль: 83%
0.01899
Низкий

7.5 High

CVSS2

Дефекты

CWE-134

Связанные уязвимости

ubuntu
около 11 лет назад

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.

redhat
около 11 лет назад

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.

debian
около 11 лет назад

Format string vulnerability in the yyerror function in lib/cgraph/scan ...

suse-cvrf
около 8 лет назад

Security update for graphviz

github
больше 3 лет назад

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.

EPSS

Процентиль: 83%
0.01899
Низкий

7.5 High

CVSS2

Дефекты

CWE-134