What is the severity of CVE-2014-1236?

CVE-2014-1236 is classified as a high severity vulnerability due to its potential to cause a buffer overflow from user input.

How do I fix CVE-2014-1236?

To fix CVE-2014-1236, upgrade Graphviz to version 2.34.1 or later where the vulnerability has been addressed.

What versions of Graphviz are affected by CVE-2014-1236?

CVE-2014-1236 affects Graphviz version 2.34.0.

What type of vulnerability is CVE-2014-1236?

CVE-2014-1236 is a buffer overflow vulnerability that arises from improper handling of user input.

Can CVE-2014-1236 be exploited remotely?

Yes, CVE-2014-1236 can potentially be exploited remotely if an attacker sends crafted input to the affected application.

Vulnerability/
CVE-2014-1236

critical

CWE

119

9/1/2014

10/1/2014

6/8/2024

CVE-2014-1236: Buffer Overflow

First published: Thu Jan 09 2014(Updated: )

Graphviz, a collection of tools for the manipulation and layout of graphs, was recently reported to be affected by a buffer overflow vulnerability from user input, which seem to be caused due to the acceptance of arbitrary long digit list by regex. References: <a href="http://seclists.org/oss-sec/2014/q1/46">http://seclists.org/oss-sec/2014/q1/46</a> Commit: <a href="https://github.com/ellson/graphviz/commit/1d1bdec6318746f6f19f245db589eddc887ae8ff">https://github.com/ellson/graphviz/commit/1d1bdec6318746f6f19f245db589eddc887ae8ff</a>

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Graphviz Graphviz	=2.34.0

Remedy

https://github.com/ellson/graphviz/commit/1d1bdec6318746f6f19f245db589eddc887ae8ff

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2014-1236?
CVE-2014-1236 is classified as a high severity vulnerability due to its potential to cause a buffer overflow from user input.
How do I fix CVE-2014-1236?
To fix CVE-2014-1236, upgrade Graphviz to version 2.34.1 or later where the vulnerability has been addressed.
What versions of Graphviz are affected by CVE-2014-1236?
CVE-2014-1236 affects Graphviz version 2.34.0.
What type of vulnerability is CVE-2014-1236?
CVE-2014-1236 is a buffer overflow vulnerability that arises from improper handling of user input.
Can CVE-2014-1236 be exploited remotely?
Yes, CVE-2014-1236 can potentially be exploited remotely if an attacker sends crafted input to the affected application.

collector/nvd-index
agent/type
agent/softwarecombine
agent/first-publish-date
agent/references
collector/mitre-cve
source/MITRE
agent/author
agent/severity
agent/remedy
agent/last-modified-date
agent/description
agent/event
collector/redhat-bugzilla
source/Red Hat
alias/CVE-2014-1236
agent/weakness
agent/trending
agent/tags
agent/source
vendor/graphviz
canonical/graphviz graphviz
version/graphviz graphviz/2.34.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2014-1236?
CVE-2014-1236 is classified as a high severity vulnerability due to its potential to cause a buffer overflow from user input.
How do I fix CVE-2014-1236?
To fix CVE-2014-1236, upgrade Graphviz to version 2.34.1 or later where the vulnerability has been addressed.
What versions of Graphviz are affected by CVE-2014-1236?
CVE-2014-1236 affects Graphviz version 2.34.0.
What type of vulnerability is CVE-2014-1236?
CVE-2014-1236 is a buffer overflow vulnerability that arises from improper handling of user input.
Can CVE-2014-1236 be exploited remotely?
Yes, CVE-2014-1236 can potentially be exploited remotely if an attacker sends crafted input to the affected application.