{"id":"CVE-2014-9157","details":"Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.","modified":"2026-04-16T06:20:27.755638058Z","published":"2014-12-03T21:59:03Z","related":["CGA-vwqc-cwpr-87h5"],"references":[{"type":"ADVISORY","url":"http://advisories.mageia.org/MGASA-2014-0520.html"},{"type":"ADVISORY","url":"http://seclists.org/oss-sec/2014/q4/784"},{"type":"ADVISORY","url":"http://seclists.org/oss-sec/2014/q4/872"},{"type":"ADVISORY","url":"http://secunia.com/advisories/60166"},{"type":"ADVISORY","url":"http://www.debian.org/security/2014/dsa-3098"},{"type":"ADVISORY","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:248"},{"type":"ADVISORY","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:187"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/71283"},{"type":"ADVISORY","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/98949"},{"type":"ADVISORY","url":"https://github.com/ellson/graphviz/commit/99eda421f7ddc27b14e4ac1d2126e5fe41719081"},{"type":"ARTICLE","url":"http://seclists.org/oss-sec/2014/q4/784"},{"type":"ARTICLE","url":"http://seclists.org/oss-sec/2014/q4/872"},{"type":"EVIDENCE","url":"http://seclists.org/oss-sec/2014/q4/784"},{"type":"EVIDENCE","url":"http://seclists.org/oss-sec/2014/q4/872"},{"type":"EVIDENCE","url":"https://github.com/ellson/graphviz/commit/99eda421f7ddc27b14e4ac1d2126e5fe41719081"},{"type":"WEB","url":"http://www.securityfocus.com/bid/71283"}],"schema_version":"1.7.5"}