NVD

Id
4376  
Name
CVE-2008-4555  
Description
Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a DOT file with a large number of Agraph_t elements.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-14  
Modified Date
2009-01-29  
Seq
2008-4555  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
27664 4376 CVE-2008-4555 http://bugs.gentoo.org/show_bug.cgi?id=240636  View
27665 4376 CVE-2008-4555 SUSE-SR:2008:023  View
27666 4376 CVE-2008-4555 http://roeehay.blogspot.com/2008/10/graphviz-buffer-overflow-code-execution.html  View
27667 4376 CVE-2008-4555 GLSA-200811-04  View
27668 4376 CVE-2008-4555 4409  View
27669 4376 CVE-2008-4555 20081008 Advisory: Graphviz Buffer Overflow Code Execution  View
27670 4376 CVE-2008-4555 31648  View
27671 4376 CVE-2008-4555 graphviz-pushsubg-bo(45765)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48225 JVNDB-2008-003535 Graphviz の parser.y (lib/graph/parser.c) の push_subg 関数におけるスタックベースのバッファーオーバーフローの脆弱性 Graphviz の parser.y (lib/graph/parser.c) の push_subg 関数には、スタックベースのバッファーオーバーフローの脆弱性が存在します。 CVE-2008-4555 34668 CVE-2008-4555 4376 8.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003535.html 2008-10-14 2012-06-26 View