CVE-1999-0409
MediumExploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
Risk Assessment
This vulnerability poses a serious security risk as local users can gain full administrative privileges.
Recommendation
It is recommended to update gnuplot to the latest version to mitigate this vulnerability.
Other vulnerabilities in gnuplot
See all- CVE-2017-9670High
CVE-2017-9670 describes an uninitialized stack variable vulnerability in the load_tic_series() function in set.c in gnuplot 5.2.rc1. An attacker can cause Denial of Service (segmentation fault and memory corruption) or possibly have unspecified other impacts when a victim opens a specially crafted file.
- CVE-2025-31177Medium
Gnuplot is affected by a heap buffer overflow at function utf8_copy_one.
- CVE-2025-31181Medium
A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.
- CVE-2025-31180Medium
A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.
- CVE-2025-31179Medium
A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.
- CVE-2025-31178Medium
A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.
- CVE-2025-31176Medium
A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.
Original NVD description (English source)
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS