CVE-2012-3438 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2012-3438 Interim 1 18 2023-12-08T02:50:44Z current 2021-05-30T13:05:02Z 2023-12-08T02:50:44Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2012-3438 The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Studio Onsite 1.3 SUSE Studio Onsite Runner 1.2 openSUSE Tumbleweed GraphicsMagick-1.2.5-4.33.1 GraphicsMagick-1.2.5-4.33.3 GraphicsMagick-1.3.25-1.1 GraphicsMagick-devel-1.3.25-1.1 ImageMagick-6.4.3.6-7.26.1 ImageMagick-devel-6.4.3.6-7.26.1 libGraphicsMagick++-Q16-12-1.3.25-1.1 libGraphicsMagick++-devel-1.3.25-1.1 libGraphicsMagick-Q16-3-1.3.25-1.1 libGraphicsMagick2-1.2.5-4.33.1 libGraphicsMagick2-1.2.5-4.33.3 libGraphicsMagick3-config-1.3.25-1.1 libGraphicsMagickWand-Q16-2-1.3.25-1.1 libMagick++-devel-6.4.3.6-7.26.1 libMagick++1-6.4.3.6-7.26.1 libMagickCore1-32bit-6.4.3.6-7.26.1 libMagickCore1-6.4.3.6-7.26.1 libMagickWand1-32bit-6.4.3.6-7.26.1 libMagickWand1-6.4.3.6-7.26.1 perl-GraphicsMagick-1.2.5-4.33.1 perl-GraphicsMagick-1.3.25-1.1 perl-PerlMagick-6.4.3.6-7.26.1 ImageMagick-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 libMagick++1-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 libMagickCore1-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 libMagickCore1-32bit-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 libMagickWand1-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 libMagickCore1-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Server 11 SP2 libMagickCore1-32bit-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Server 11 SP2 libMagickCore1-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 libMagickCore1-32bit-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 GraphicsMagick-1.2.5-4.33.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ImageMagick-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 ImageMagick-devel-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 libGraphicsMagick2-1.2.5-4.33.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 libMagick++-devel-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 libMagick++1-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 libMagickWand1-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 libMagickWand1-32bit-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 perl-GraphicsMagick-1.2.5-4.33.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 perl-PerlMagick-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 GraphicsMagick-1.2.5-4.33.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libGraphicsMagick2-1.2.5-4.33.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 perl-GraphicsMagick-1.2.5-4.33.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 GraphicsMagick-1.2.5-4.33.1 as a component of SUSE Studio Onsite 1.3 libGraphicsMagick2-1.2.5-4.33.1 as a component of SUSE Studio Onsite 1.3 GraphicsMagick-1.2.5-4.33.3 as a component of SUSE Studio Onsite Runner 1.2 libGraphicsMagick2-1.2.5-4.33.3 as a component of SUSE Studio Onsite Runner 1.2 GraphicsMagick-1.3.25-1.1 as a component of openSUSE Tumbleweed GraphicsMagick-devel-1.3.25-1.1 as a component of openSUSE Tumbleweed libGraphicsMagick++-Q16-12-1.3.25-1.1 as a component of openSUSE Tumbleweed libGraphicsMagick++-devel-1.3.25-1.1 as a component of openSUSE Tumbleweed libGraphicsMagick-Q16-3-1.3.25-1.1 as a component of openSUSE Tumbleweed libGraphicsMagick3-config-1.3.25-1.1 as a component of openSUSE Tumbleweed libGraphicsMagickWand-Q16-2-1.3.25-1.1 as a component of openSUSE Tumbleweed perl-GraphicsMagick-1.3.25-1.1 as a component of openSUSE Tumbleweed The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation. CVE-2012-3438 SUSE Linux Enterprise Desktop 11 SP2:ImageMagick-6.4.3.6-7.26.1 SUSE Linux Enterprise Desktop 11 SP2:libMagick++1-6.4.3.6-7.26.1 SUSE Linux Enterprise Desktop 11 SP2:libMagickCore1-6.4.3.6-7.26.1 SUSE Linux Enterprise Desktop 11 SP2:libMagickCore1-32bit-6.4.3.6-7.26.1 SUSE Linux Enterprise Desktop 11 SP2:libMagickWand1-6.4.3.6-7.26.1 SUSE Linux Enterprise Server 11 SP2:libMagickCore1-6.4.3.6-7.26.1 SUSE Linux Enterprise Server 11 SP2:libMagickCore1-32bit-6.4.3.6-7.26.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libMagickCore1-6.4.3.6-7.26.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libMagickCore1-32bit-6.4.3.6-7.26.1 SUSE Linux Enterprise Software Development Kit 11 SP2:GraphicsMagick-1.2.5-4.33.1 SUSE Linux Enterprise Software Development Kit 11 SP2:ImageMagick-6.4.3.6-7.26.1 SUSE Linux Enterprise Software Development Kit 11 SP2:ImageMagick-devel-6.4.3.6-7.26.1 SUSE Linux Enterprise Software Development Kit 11 SP2:libGraphicsMagick2-1.2.5-4.33.1 SUSE Linux Enterprise Software Development Kit 11 SP2:libMagick++-devel-6.4.3.6-7.26.1 SUSE Linux Enterprise Software Development Kit 11 SP2:libMagick++1-6.4.3.6-7.26.1 SUSE Linux Enterprise Software Development Kit 11 SP2:libMagickWand1-6.4.3.6-7.26.1 SUSE Linux Enterprise Software Development Kit 11 SP2:libMagickWand1-32bit-6.4.3.6-7.26.1 SUSE Linux Enterprise Software Development Kit 11 SP2:perl-GraphicsMagick-1.2.5-4.33.1 SUSE Linux Enterprise Software Development Kit 11 SP2:perl-PerlMagick-6.4.3.6-7.26.1 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-4.33.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-4.33.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-4.33.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-4.33.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-4.33.1 SUSE Studio Onsite Runner 1.2:GraphicsMagick-1.2.5-4.33.3 SUSE Studio Onsite Runner 1.2:libGraphicsMagick2-1.2.5-4.33.3 openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1 openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1 openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1 openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1 openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1 openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1 openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1 openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P