CVE-2005-4803: Low severity Graphviz graphviz vulnerability
graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues. This is the correct identifier.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4803?
CVE-2005-4803 is considered a moderate severity vulnerability due to its potential to allow local users to overwrite arbitrary files.
How do I fix CVE-2005-4803?
To fix CVE-2005-4803, you should upgrade to a version of Graphviz that is higher than 2.2.1.
What kind of attack does CVE-2005-4803 involve?
CVE-2005-4803 involves a symlink attack that enables local users to overwrite files.
Which versions of Graphviz are affected by CVE-2005-4803?
Graphviz versions before 2.2.1, including several earlier versions like 1.10 and 1.8.9.1, are affected by CVE-2005-4803.
Who can exploit CVE-2005-4803?
CVE-2005-4803 can be exploited by local users who have access to the system where an affected version of Graphviz is installed.