CVE-2005-4803

Published: Dec 31, 2005Modified: Apr 16, 2026

3.6

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:P

Exploitability: 3.9 / Impact: 4.9

Source: NVD

Description

graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues. This is the correct identifier.

Affected (26)

Products: Graphviz: Graphviz

Graphviz

1 product

Graphviz

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Graphviz Graphviz	Up to 2.2
Graphviz Graphviz	Version 1.10_2003-09-15_0415_1
Graphviz Graphviz	Version 1.10_2003-09-15_0415_2
Graphviz Graphviz	Version 1.12.1
Graphviz Graphviz	Version 1.12.2
Graphviz Graphviz	Version 1.12.3
Graphviz Graphviz	Version 1.14.1
Graphviz Graphviz	Version 1.16.1
Graphviz Graphviz	Version 1.5.1
Graphviz Graphviz	Version 1.5.2
Graphviz Graphviz	Version 1.5.3
Graphviz Graphviz	Version 1.7.16.1
Graphviz Graphviz	Version 1.7.16.2
Graphviz Graphviz	Version 1.7.5.1
Graphviz Graphviz	Version 1.7.5.2
Graphviz Graphviz	Version 1.7.5.3
Graphviz Graphviz	Version 1.7.5.4
Graphviz Graphviz	Version 1.7.5.5
Graphviz Graphviz	Version 1.7.5.6
Graphviz Graphviz	Version 1.7.5.7
Graphviz Graphviz	Version 1.7.5_0.1
Graphviz Graphviz	Version 1.7.5_0.2
Graphviz Graphviz	Version 1.7.5_0.3
Graphviz Graphviz	Version 1.8.5.1
Graphviz Graphviz	Version 1.8.5.2
Graphviz Graphviz	Version 1.8.9.1