CVE-2014-9157

Description

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/98949

http://www.debian.org/security/2014/dsa-3098

http://advisories.mageia.org/MGASA-2014-0520.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3