CVE-2012-4433: Buffer Overflow
First published: Tue Sep 11 2012(Updated: )
An integer overflow, leading to heap-based buffer overflow was found in the way portable pixmap format (PPM) image file format handler of GEGL, a graph based image processing framework, processed certain input PPM image file headers. A remote attacker could provide a specially-crafted PPM image that when opened in gegl executable would lead to crash, or, potentially arbitrary code execution with the privileges of the user running the binary. This issue was found by Murray McAllister, Red Hat Security Response Team.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Gegl Gegl | =0.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.gnome.org/browse/gegl/commit/?id=1e92e5235ded0415d555aa86066b8e4041ee5a53
- http://git.gnome.org/browse/gegl/commit/?id=4757cdf73d3675478d645a3ec8250ba02168a230
- http://lists.opensuse.org/opensuse-updates/2013-01/msg00054.html
- http://rhn.redhat.com/errata/RHSA-2012-1455.html
- http://secunia.com/advisories/51114
- http://secunia.com/advisories/51274
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:081
- http://www.openwall.com/lists/oss-security/2012/11/06/1
- http://www.securityfocus.com/bid/56404
- http://www.securitytracker.com/id?1027754
- https://bugzilla.redhat.com/show_bug.cgi?id=856300
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79822
- https://access.redhat.com/security/cve/CVE-2012-4433
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=614202&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=614202&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=614203&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=614203&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=633906&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=633906&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=873182
- https://rhn.redhat.com/errata/RHSA-2012-1455.html
- collector/redhat-bugzilla
- alias/CVE-2012-4433
- collector/nvd-index
- agent/references
- agent/weakness
- agent/tags
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- vendor/gegl
- canonical/gegl gegl
- version/gegl gegl/0.2.0