CVE-2017-9670 An uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have...
HighCVSS 7.8
EPSS 0.87%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have unspecified other impact when a victim opens a specially crafted file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/gnuplot(Debian:12) | < 5.0.5+dfsg1-7 | 5.0.5+dfsg1-7 |
| debian/gnuplot(Debian:13) | < 5.0.5+dfsg1-7 | 5.0.5+dfsg1-7 |
| debian/gnuplot(Debian:14) | < 5.0.5+dfsg1-7 | 5.0.5+dfsg1-7 |
| gnuplot | = 5.2-rc1 | No fix listed |
References
- Debian Security Tracker CVE-2017-9670 vendor-advisory
- sourceforge.net patch third-party-advisory
- bugs.debian.org issue-tracking