Security Advisory

CVE-2018-19490

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-11-23 17:00:00
Last updated 2024-08-05 11:37:11
Assigner mitre
State PUBLISHED

Description

An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data in df_generate_ascii_array_entry. To exploit this vulnerability, an attacker must pass an overlong string as the right bound of the range argument that is passed to the plot function.