CVE-2012-1175 Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a craft...
MediumCVSS 6.8
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU gnash | = 0.8.10 | No fix listed |
References
- git.savannah.gnu.org
- 47183 third-party-advisory
- 48466 third-party-advisory
- DSA-2435 vendor-advisory
- [oss-security] 20120314 CVE request: gnash integer overflow mailing-list
- [oss-security] 20120314 Re: CVE request: gnash integer overflow mailing-list
- 52446 vdb-entry
- bugzilla.redhat.com