REDHAT-BUG-856300: Buffer Overflow
An integer overflow, leading to heap-based buffer overflow was found in the way portable pixmap format (PPM) image file format handler of GEGL, a graph based image processing framework, processed certain input PPM image file headers. A remote attacker could provide a specially-crafted PPM image that when opened in gegl executable would lead to crash, or, potentially arbitrary code execution with the privileges of the user running the binary.
This issue was found by Murray McAllister, Red Hat Security Response Team.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-856300?
The severity of REDHAT-BUG-856300 is considered high due to the potential for remote attackers to exploit the vulnerability.
How do I fix REDHAT-BUG-856300?
To fix REDHAT-BUG-856300, it is recommended to update GEGL to the latest version that addresses this vulnerability.
What type of vulnerability is REDHAT-BUG-856300?
REDHAT-BUG-856300 is classified as an integer overflow vulnerability that results in a heap-based buffer overflow.
Which software is affected by REDHAT-BUG-856300?
REDHAT-BUG-856300 affects the GEGL software, specifically its handling of PPM image file formats.
Can REDHAT-BUG-856300 be exploited remotely?
Yes, REDHAT-BUG-856300 can be exploited by remote attackers through specially crafted PPM image files.