CVE-2005-4803: Graphviz

Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days.

graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues. This is the correct identifier.

Affected products

• Graphviz Graphviz: up to and including 2.2; version 1.5.1 only; version 1.5.2 only; version 1.5.3 only; version 1.7.5.1 only; version 1.7.5.2 only; …

Published 2005-12-31. Last modified 2026-06-16.