CVE-2008-4555

CVE-2008-4555 describes a stack-based buffer overflow in the Graphviz graphing software, specifically affecting versions up to 2.20.2. This flaw, located in the push_subg function, can be triggered by a user-assisted remote attacker providing a specially crafted DOT file containing numerous Agraph_t elements. The vulnerability carries a high CVSS score of 8.5, indicating a severe risk. An attacker could exploit this with medium complexity (AC:M) to achieve complete confidentiality, integrity, and availability compromise (C:C/I:C/A:C), potentially leading to denial of service or arbitrary code execution. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.