CVE-2012-3509

Multiple integer overflows in the (1) _objalloc_alloc function in
objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU
libiberty, as used by binutils 2.22, allow remote attackers to cause a
denial of service (crash) via vectors related to the “addition of
CHUNK_HEADER_SIZE to the length,” which triggers a heap-based buffer
overflow.

Bugs

• <http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54411&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3509&gt;