Graphviz 'yyerror()' Function Incomplete Fix Stack Buffer Overflow Vulnerability

Bugtraq ID:	64736
Class:	Boundary Condition Error
CVE:	CVE-2014-1235
Remote:	Yes
Local:	No
Published:	Jan 09 2014 12:00AM
Updated:	Mar 07 2017 03:02AM
Credit:	Sebastian Krahmer
Vulnerable:	Ubuntu Ubuntu Linux 13.10 Ubuntu Ubuntu Linux 13.04 Ubuntu Ubuntu Linux 12.10 Ubuntu Ubuntu Linux 12.04 LTS Ubuntu Ubuntu Linux 10.04 LTS Graphviz Graphviz 2.34.0 Gentoo Linux
Not Vulnerable:

Graphviz 'yyerror()' Function Incomplete Fix Stack Buffer Overflow Vulnerability

Graphviz is prone to a remote stack-based buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

Successful exploits allow remote attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts likely result in denial-of-service conditions.

Graphviz 2.34.0 is vulnerable; other versions may also be affected.

Note: This issue is the result of an incomplete fix for the issue described in BID 64674 (Graphviz 'yyerror()' Function Stack Buffer Overflow Vulnerability).

Graphviz 'yyerror()' Function Incomplete Fix Stack Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Graphviz 'yyerror()' Function Incomplete Fix Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Graphviz 'yyerror()' Function Incomplete Fix Stack Buffer Overflow Vulnerability

References:

• Fix buffer overflow problem when reporting a syntax error (Github)
  
• Graphviz Homepage (Graphviz)
  
• Re: CVE Request: graphviz: stack-based buffer overflow in yyerror() (seclists.org)