CVE-2012-1175

Currently unrated

Key Information:

Vendor
Gnu
Status
Gnash
Vendor
CVE Published:
26 August 2012

Summary

Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow.

References

http://www.openwall.com/lists/oss-security/2012/03/14/5
mailing-listx_refsource_MLIST
http://git.savannah.gnu.org/cgit/gnash.git/commit/?id=bb4...
x_refsource_CONFIRM
http://secunia.com/advisories/47183
third-party-advisoryx_refsource_SECUNIA

EPSS Score

3% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.