NetSight
critical9.8

CVE-2020-25412

com_line() in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy() that may lead to arbitrary code execution.

Impact

com_line() in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy() that may lead to arbitrary code execution.

Affected products

VendorProductAffected versions
GnuplotGnuplot
Version 5.4.0

Weakness classification

References