Cloudanix VulnDB

CVE-2012-4433

None

CVSS

—

EPSS

13.3%

Published

Nov 18, 2012

CISA due date

—

The record

Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large (1) width or (2) height value in a Portable Pixel Map (ppm) image, which triggers a heap-based buffer overflow.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 gegl 0 0.2.0-2+nmu1
Debian:12 gegl 0 0.2.0-2+nmu1
Debian:13 gegl 0 0.2.0-2+nmu1
Red Hat:enterprise_linux:6::client gegl 0 0:0.1.2-4.el6_3
Red Hat:enterprise_linux:6::client gegl-debuginfo 0 0:0.1.2-4.el6_3
Red Hat:enterprise_linux:6::client gegl-devel 0 0:0.1.2-4.el6_3
Red Hat:enterprise_linux:6::server gegl 0 0:0.1.2-4.el6_3
Red Hat:enterprise_linux:6::server gegl-debuginfo 0 0:0.1.2-4.el6_3
Red Hat:enterprise_linux:6::server gegl-devel 0 0:0.1.2-4.el6_3
Red Hat:enterprise_linux:6::workstation gegl 0 0:0.1.2-4.el6_3
Red Hat:enterprise_linux:6::workstation gegl-debuginfo 0 0:0.1.2-4.el6_3
Red Hat:enterprise_linux:6::workstation gegl-devel 0 0:0.1.2-4.el6_3
SUSE:Linux Enterprise Desktop 12 SP1 gegl 0 0.2.0-10.3.3
SUSE:Linux Enterprise Desktop 12 SP2 gegl 0 0.2.0-14.3
SUSE:Linux Enterprise Software Development Kit 12 SP1 gegl 0 0.2.0-10.3.3
SUSE:Linux Enterprise Software Development Kit 12 SP2 gegl 0 0.2.0-14.3
SUSE:Linux Enterprise Workstation Extension 12 SP1 gegl 0 0.2.0-10.3.3
SUSE:Linux Enterprise Workstation Extension 12 SP2 gegl 0 0.2.0-14.3
Ubuntu:14.04:LTS gegl 0 0.2.0-4ubuntu1
Ubuntu:16.04:LTS gegl 0 0.3.4-1ubuntu2
openSUSE:Tumbleweed gegl 0 0.4.30-2.8

Related vulnerabilities