CyberSec.Space Logo
Back to CVE Browser

CVE-2014-1236

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1690%
EPSS Percentile38.43th
PublishedJan 10, 2014
Last ModifiedApr 29, 2026

Vulnerability Description

Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list."

Affected Platforms (CPE)

📦
Graphviz

Graphviz

= 2.34.0

References & Advisories

🔗 http://osvdb.org/101851
🔗 http://seclists.org/oss-sec/2014/q1/46
🔗 http://seclists.org/oss-sec/2014/q1/51
🔗 http://seclists.org/oss-sec/2014/q1/54
🔗 http://secunia.com/advisories/55666
🔗 http://secunia.com/advisories/56244
🔗 http://www.debian.org/security/2014/dsa-2843
🔗 http://www.mandriva.com/security/advisories?name=MDVSA-2014:024

Related Vulnerabilities

CVE-2014-09789.3

Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspec...

CVE-2019-110238.8

The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrate...

CVE-2021-233528.6

This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath option paramete...

CVE-2008-45558.5

Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier ve...