Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a DOT file with a large number of Agraph_t elements.

Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a DOT file with a large number of Agraph_t elements. (CVE-2008-4555)

Note: graphviz-ocaml is no longer supported in the SL version of graphiviz. This is because ocaml was never included. If you do have graphviz-ocaml installed, you will have to remove it before doing this update.

Note: This update is already in SL 5.4

A vulnerability was discovered and corrected in graphviz :

Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a DOT file with a large number of Agraph_t elements (CVE-2008-4555).

This update provides a fix for this vulnerability.

Update :

Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers

This update of graphviz fixes a buffer overflow that occurs while parsing a DOT file. (CVE-2008-4555)

The remote host is affected by the vulnerability described in GLSA-200811-04 (Graphviz: User-assisted execution of arbitrary code)

    Roee Hay reported a stack-based buffer overflow in the push_subg()     function in parser.y when processing a DOT file with a large number of     Agraph_t elements.
  Impact :

    A remote attacker could entice a user or automated system to open a     specially crafted DOT file in an application using Graphviz, possibly     leading to the execution of arbitrary code.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
60694	Scientific Linux Security Update : graphviz on SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	high
41961	Mandriva Linux Security Advisory : graphviz (MDVSA-2009:254-1)	Nessus	Mandriva Local Security Checks	high
39975	openSUSE Security Update : graphviz (graphviz-249)	Nessus	SuSE Local Security Checks	high
34735	GLSA-200811-04 : Graphviz: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	high
34506	SuSE 10 Security Update : graphviz (ZYPP Patch Number 5688)	Nessus	SuSE Local Security Checks	high
34439	openSUSE 10 Security Update : graphviz (graphviz-5690)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2008-4555

high

Tenable Plugins

high

high

high

high

high

high