Multiple format string vulnerabilities in the python module in RRDtool as used in Zenoss Core before 4.2.5 and other products allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted third argument to the rrdtool.graph function aka ZEN-15415 a related issue to CVE-2013-2131.