Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large (1) width or (2) height value in a Portable Pixel Map (ppm) image, which triggers a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade geglUpgrade gegl-devel | Dec 1, 2016 | Nov 18, 2012 |
| Debian | — | Upgrade gegl | Jul 30, 2024 | Nov 18, 2012 |
| Gentoo Linux | — | Upgrade media-libs/gegl. | Oct 30, 2017 | Nov 18, 2012 |
| Oracle Solaris | — | Upgrade image/library/gegl to version 0.1.2-0.175.1.9.0.2.0 on Solaris 11.1Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Nov 18, 2012 |
| Oracle_linux | — | Upgrade gegl-develUpgrade gegl | Oct 16, 2024 | Nov 18, 2012 |
| Suse | — | Upgrade gegl-0_2Upgrade gegl-0_4Upgrade gegl-0_3-langUpgrade libgegl-0_2-0Upgrade typelib-1_0-Gegl-0_3Upgrade typelib-1_0-Gegl-0_4Upgrade gegl-0_4-langUpgrade libgegl-0_4-0Upgrade gegl-develUpgrade gegl-0_2-langUpgrade gegl-0_3Upgrade libgegl-0_3-0 | Apr 26, 2018 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub