CVE ID:	CVE-2014-9157
Description:	Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.
Test IDs:	1.3.6.1.4.1.25623.1.0.120327   1.3.6.1.4.1.25623.1.1.2.2019.2355   1.3.6.1.4.1.25623.1.1.2.2019.2592   1.3.6.1.4.1.25623.1.0.120320   1.3.6.1.4.1.25623.1.0.703098   1.3.6.1.4.1.25623.1.0.868736   1.3.6.1.4.1.25623.1.1.12.2014.2435.1   1.3.6.1.4.1.25623.1.1.10.2014.0520   1.3.6.1.4.1.25623.1.1.1.2.2014.105
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9157 BugTraq ID: 71283 http://www.securityfocus.com/bid/71283 Debian Security Information: DSA-3098 (Google Search) http://www.debian.org/security/2014/dsa-3098 http://www.mandriva.com/security/advisories?name=MDVSA-2014:248 http://www.mandriva.com/security/advisories?name=MDVSA-2015:187 http://seclists.org/oss-sec/2014/q4/784 http://seclists.org/oss-sec/2014/q4/872 http://secunia.com/advisories/60166 XForce ISS Database: graphviz-format-sting(98949) https://exchange.xforce.ibmcloud.com/vulnerabilities/98949