NVD

Id
45033  
Name
CVE-2012-3438  
Description
The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-08-07  
Modified Date
2013-06-04  
Seq
2012-3438  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225779 45033 CVE-2012-3438 http://graphicsmagick.hg.sourceforge.net/hgweb/graphicsmagick/graphicsmagick/rev/d6e469d02cd2  View
225780 45033 CVE-2012-3438 openSUSE-SU-2013:0536  View
225781 45033 CVE-2012-3438 MDVSA-2012:165  View
225782 45033 CVE-2012-3438 54716  View
225783 45033 CVE-2012-3438 graphicsmagick-png-dos(77259)  View
225784 45033 CVE-2012-3438 https://bugzilla.redhat.com/show_bug.cgi?id=844105  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27803 JVNDB-2012-003510 GraphicsMagick の coders/png.c の Magick_png_malloc 関数におけるサービス運用妨害 (DoS) の脆弱性 GraphicsMagick の coders/png.c の Magick_png_malloc 関数は、割り当てサイズの変数に適切な型を使用しないため、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2012-3438 56676 CVE-2012-3438 45033 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003510.html 2012-08-07 2012-08-09 View