CVE-2014-0978

EPSS 6.5%

graphviz - buffer overflow

Published: 1/10/2014Modified: 4/28/2026

Also known as:DEBIAN-CVE-2014-0978

Description

Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file.

Affected packages (2)

Debian/graphvizfrom 0, < 2.26.3-16
Debian/graphvizfrom 0, < 2.26.3-5+squeeze2

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-0978