Home page logo
/

oss-sec logo oss-sec mailing list archives

gegl: Integer overflow, leading to heap-based buffer overflow by parsing PPM image headers
From: Huzaifa Sidhpurwala <huzaifas () redhat com>
Date: Tue, 06 Nov 2012 09:38:09 +0530

Hi All,

An integer overflow, leading to heap-based buffer overflow was found in the way portable pixmap format (PPM) image file format handler of GEGL, a graph based image processing framework, processed certain input PPM image file headers. A remote attacker could provide a specially-crafted PPM image that when opened in gegl executable would lead to crash, or, potentially arbitrary code execution with the privileges of the user running the binary.

This issue was found by Murray McAllister, Red Hat Security Response Team.

We have assigned CVE-2012-4433 to this issue.

Reference:
https://bugzilla.redhat.com/show_bug.cgi?id=856300


--
Huzaifa Sidhpurwala / Red Hat Security Response Team


  By Date           By Thread  

Current thread:
  • gegl: Integer overflow, leading to heap-based buffer overflow by parsing PPM image headers Huzaifa Sidhpurwala (Nov 06)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]