CVE-2012-4433

EUVD-2012-4367
Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large (1) width or (2) height value in a Portable Pixel Map (ppm) image, which triggers a heap-based buffer overflow.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
Affected Products (NVD)
VendorProductVersion
geglgegl
0.2.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
gegl
bookworm
1:0.4.42-2
fixed
bullseye
1:0.4.26-2
fixed
sid
1:0.4.50-1
fixed
squeeze
not-affected
trixie
1:0.4.48-2.5
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gegl
hardy
dne
lucid
ignored
oneiric
ignored
precise
ignored
quantal
ignored
raring
ignored
saucy
ignored
trusty
dne
utopic
ignored
vivid
ignored
wily
ignored
xenial
not-affected
yakkety
not-affected
zesty
not-affected
Common Weakness Enumeration
References
http://git.gnome.org/browse/gegl/commit/?id=1e92e5235ded0415d555aa86066b8e4041ee5a53
http://git.gnome.org/browse/gegl/commit/?id=4757cdf73d3675478d645a3ec8250ba02168a230
http://lists.opensuse.org/opensuse-updates/2013-01/msg00054.html
http://rhn.redhat.com/errata/RHSA-2012-1455.html
http://secunia.com/advisories/51114
http://secunia.com/advisories/51274
http://www.mandriva.com/security/advisories?name=MDVSA-2013:081
http://www.openwall.com/lists/oss-security/2012/11/06/1
http://www.securityfocus.com/bid/56404
http://www.securitytracker.com/id?1027754
https://bugzilla.redhat.com/show_bug.cgi?id=856300
https://exchange.xforce.ibmcloud.com/vulnerabilities/79822
http://git.gnome.org/browse/gegl/commit/?id=1e92e5235ded0415d555aa86066b8e4041ee5a53
http://git.gnome.org/browse/gegl/commit/?id=4757cdf73d3675478d645a3ec8250ba02168a230
http://lists.opensuse.org/opensuse-updates/2013-01/msg00054.html
http://rhn.redhat.com/errata/RHSA-2012-1455.html
http://secunia.com/advisories/51114
http://secunia.com/advisories/51274
http://www.mandriva.com/security/advisories?name=MDVSA-2013:081
http://www.openwall.com/lists/oss-security/2012/11/06/1
http://www.securityfocus.com/bid/56404
http://www.securitytracker.com/id?1027754
https://bugzilla.redhat.com/show_bug.cgi?id=856300
https://exchange.xforce.ibmcloud.com/vulnerabilities/79822