CVE-1999-0409

CVSS 2.0 Score 4.6 of 10 (medium)

Details

Published Mar 4, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-0409 is a buffer overflow vulnerability affecting the gnuplot utility in Linux version 3.5. Maliciously crafted input data can be used to overwrite memory beyond the intended buffer, leading to arbitrary code execution. An attacker can exploit this flaw to gain root access, making it a serious security concern for Linux systems using the vulnerable version of gnuplot. Local users are at risk, as no network access is required to trigger the vulnerability. It is recommended that affected systems be updated to a patched version of gnuplot as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • SUSE Linux Enterprise Server

Affected Vendors

  • SUSE Linux GmbH