CVE-2012-1175 - Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows r

CVE-2012-1175

Summary

Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow.

References

Vulnerable Configurations

cpe:2.3:a:gnu:gnash:0.8.10:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnash:0.8.10:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 27-08-2012 - 04:00)
Impact:
Exploitability:

CWE

CWE-189

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

bid	52446
confirm	http://git.savannah.gnu.org/cgit/gnash.git/commit/?id=bb4dc77eecb6ed1b967e3ecbce3dac6c5e6f1527
debian	DSA-2435
misc	https://bugzilla.redhat.com/show_bug.cgi?id=803443
mlist	[oss-security] 20120314 CVE request: gnash integer overflow [oss-security] 20120314 Re: CVE request: gnash integer overflow
secunia	47183 48466

Last major update

27-08-2012 - 04:00

Published

26-08-2012 - 20:55

Last modified

27-08-2012 - 04:00