|
|
| |
|
| |
gegl: code execution
| Package(s): | gegl |
CVE #(s): | CVE-2012-4433
|
| Created: | November 13, 2012 |
Updated: | January 23, 2013 |
| Description: |
From the Red Hat advisory:
An integer overflow flaw, leading to a heap-based buffer overflow, was
found in the way the gegl utility processed .ppm (Portable Pixel Map) image
files. An attacker could create a specially-crafted .ppm file that, when
opened in gegl, would cause gegl to crash or, potentially, execute
arbitrary code. |
| Alerts: |
|
( Log in to post comments)
|
|
|