Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a DOT file with a large number of Agraph_t elements.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Graphviz图形解析器Agraph_t远程栈溢出漏洞
Vulnerability Description
Graphviz（Graph Visualization Software）是美国AT&T实验室研发的一套用于绘制DOT语言脚本所描述的图形的开源绘图工具。 Graphviz的解析引擎中存在栈溢出漏洞，远程攻击者造成拒绝服务攻击漏洞(内存耗尽)或执行任意代码，利用一个DOT文件的大量Agraph_t属性.
CVSS Information
N/A
Vulnerability Type
N/A