CyberSec.Space Logo
Back to CVE Browser

CVE-2014-0978

CRITICAL
9.3
CVSS Severity Score
EPSS Score0.1630%
EPSS Percentile29.95th
PublishedJan 10, 2014
Last ModifiedApr 29, 2026

Vulnerability Description

Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file.

Affected Platforms (CPE)

📦
Graphviz

Graphviz

= 2.34.0

References & Advisories

🔗 http://seclists.org/oss-sec/2014/q1/28
🔗 http://seclists.org/oss-sec/2014/q1/38
🔗 http://secunia.com/advisories/55666
🔗 http://secunia.com/advisories/56244
🔗 http://www.debian.org/security/2014/dsa-2843
🔗 http://www.mandriva.com/security/advisories?name=MDVSA-2014:024
🔗 http://www.securityfocus.com/bid/64674
🔗 https://bugs.gentoo.org/show_bug.cgi?id=497274

Related Vulnerabilities

CVE-2014-123610.0

Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspeci...

CVE-2019-110238.8

The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrate...

CVE-2021-233528.6

This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath option paramete...

CVE-2008-45558.5

Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier ve...