CVE-2012-4433

Multiple integer overflows in operations/external/ppm-load.c in GEGL
(Generic Graphics Library) 0.2.0 allow remote attackers to cause a denial
of service (application crash) or possibly execute arbitrary code via a
large (1) width or (2) height value in a Portable Pixel Map (ppm) image,
which triggers a heap-based buffer overflow.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692435&gt;