CVE-2014-6262

CVE-2014-6262 describes multiple format string vulnerabilities within the Python module of RRDtool, impacting Zenoss Core versions prior to 4.2.5 and other products. A remote attacker can exploit this by providing a specially crafted third argument to the rrdtool.graph function, leading to arbitrary code execution or a denial of service. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity, primarily resulting in high availability impact. There is no evidence of active exploitation, public exploit code, or Metasploit modules, though it has garnered some community discussion and media coverage.