CVEvulnerability

CVE-2008-4555

8.5 HIGH Published 2008-10-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-10-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a DOT file with a large number of Agraph_t elements.

Affected configurations

• graphviz graphviz (<= 2.20.2) • graphviz graphviz 1.5.1 • graphviz graphviz 1.5.2 • graphviz graphviz 1.5.3 • graphviz graphviz 1.7.5.1 • graphviz graphviz 1.7.5.2 • graphviz graphviz 1.7.5.3 • graphviz graphviz 1.7.5.4 • graphviz graphviz 1.7.5.5 • graphviz graphviz 1.7.5.6 • graphviz graphviz 1.7.5.7 • graphviz graphviz 1.7.5 0.1 • graphviz graphviz 1.7.5 0.2 • graphviz graphviz 1.7.5 0.3 • graphviz graphviz 1.7.16.1 • graphviz graphviz 1.7.16.2 • graphviz graphviz 1.8.5.1 • graphviz graphviz 1.8.5.2 • graphviz graphviz 1.8.9.1 • graphviz graphviz 1.10 2003-09-15 0415 1 • graphviz graphviz 1.10 2003-09-15 0415 2 • graphviz graphviz 1.12.1 • graphviz graphviz 1.12.2 • graphviz graphviz 1.12.3 • graphviz graphviz 1.14.1 • graphviz graphviz 1.16.1 • graphviz graphviz 2.2 • graphviz graphviz 2.2.1 • graphviz graphviz 2.2.1.1 • graphviz graphviz 2.2.2 • graphviz graphviz 2.4 • graphviz graphviz 2.6 • graphviz graphviz 2.8 • graphviz graphviz 2.10 • graphviz graphviz 2.12 • graphviz graphviz 2.14 • graphviz graphviz 2.16 • graphviz graphviz 2.18 • graphviz graphviz 2.20.0 • graphviz graphviz 2.20.1

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References