CVE-2012-1175: Buffer Overflow
Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow.
Other sources
It was reported [1] that an integer overflow in GNU Gnash's GnashImage::size() method could be exploited to cause a heap-based buffer overflow when opening certain specially-crafted SWF files. If a user were tricked into opening a malicious SWF file it cause cause Gnash to crash or, possibly, execute arbitrary code with the permissions of the user running Gnash.
The flaw was reported in 0.8.10 and is fixed in git [2].
[1] http://secunia.com/advisories/47183 [2] http://git.savannah.gnu.org/cgit/gnash.git/commit/?id=bb4dc77eecb6ed1b967e3ecbce3dac6c5e6f1527
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1175?
CVE-2012-1175 has a high severity level due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2012-1175?
To fix CVE-2012-1175, upgrade GNU Gnash to a version that resolves the integer overflow issue.
What software is affected by CVE-2012-1175?
The affected software for CVE-2012-1175 is GNU Gnash version 0.8.10.
What type of vulnerability is CVE-2012-1175?
CVE-2012-1175 is an integer overflow vulnerability that may lead to a heap-based buffer overflow.
What can attackers do with CVE-2012-1175?
Attackers can exploit CVE-2012-1175 to cause a crash or potentially execute arbitrary code using a crafted SWF file.