GraphicsMagick: denial of service
| Package(s): | GraphicsMagick | CVE #(s): | CVE-2012-3438 | ||||||||||||||||||||
| Created: | September 7, 2012 | Updated: | March 26, 2013 | ||||||||||||||||||||
| Description: | From the Red Hat advisory: "As this function stands, it invisibly does the wrong thing for any request over 4GB. On big-endian architectures it very possibly will do the wrong thing even for requests less than that. So the reason why the hard-wired 4GB limit prevents a core dump is that it masks the ABI mismatch here." So basically we have memory allocations problems that can probably lead to a denial of service. | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||