CVE:CVE-2018-19492
CNNVD:CNNVD-201811-672
Gnuplot是一款开放源代码绘图软件。
Gnuplot 5.2.5版本中的cairo.trm文件存在缓冲区溢出漏洞，该漏洞源于程序没有检测发送到‘set font’函数的参数大小。攻击者可借助任意长度的字体名利用该漏洞劫持控制流。
solution:Upgrade gnuplot gnuplot to a higher version than 5.2.5,and avoid the version 5.2.5; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0