Summary
It was discovered that graphviz incorrectly handled parsing errors. An
attacker could use this issue to cause graphviz to crash or possibly
execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | graphviz | 2.36.0-0ubuntu3.1 |
Vulnerabilities 1
-
Unscored —
Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have un…
References
-
report
https://ubuntu.com/security/CVE-2014-9157