GEGL CVE-2012-4433 Integer Overflow Vulnerability

Bugtraq ID:	56404
Class:	Boundary Condition Error
CVE:	CVE-2012-4433
Remote:	Yes
Local:	No
Published:	Nov 06 2012 12:00AM
Updated:	Apr 13 2015 09:45PM
Credit:	Murray McAllister of Red Hat Security Response Team
Vulnerable:	Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Gentoo Linux CentOS CentOS 6
Not Vulnerable:

GEGL CVE-2012-4433 Integer Overflow Vulnerability

GEGL is prone to a remote integer-overflow vulnerability which leads to heap-based buffer overflow vulnerability.

Successful exploits may allow an attacker to execute arbitrary code in the context of a user running an application that uses the affected library. Failed exploit attempts may crash the application, denying service to legitimate users.

GEGL 0.2.0 is vulnerable; other versions may also be affected.

GEGL CVE-2012-4433 Integer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GEGL CVE-2012-4433 Integer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

GEGL CVE-2012-4433 Integer Overflow Vulnerability

References:

• GNU C Library Homepage (GNU)