|
|
| |
|
| |
GraphicsMagick: denial of service
| Package(s): | GraphicsMagick |
CVE #(s): | CVE-2012-3438
|
| Created: | September 7, 2012 |
Updated: | March 26, 2013 |
| Description: |
From the Red Hat advisory:
"As this function stands, it invisibly does the wrong thing for any request
over 4GB. On big-endian architectures it very possibly will do the wrong
thing even for requests less than that. So the reason why the hard-wired 4GB
limit prevents a core dump is that it masks the ABI mismatch here."
So basically we have memory allocations problems that can probably lead to a
denial of service. |
| Alerts: |
|
( Log in to post comments)
|
|
|