CVE-2014-1235

Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote attackers to execute arbitrary code or cause a denial of service…

published August 7, 2017

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted file. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-0978.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02929 · 87.0th percentile
Published
2017-08-07T20:00Z
EPSS history
Timeline
  • 07 AUG 20:00Z
    Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote attackers to execute arbitrary code or cause a denial of service…
    cvelistv5