CVE-2012-2673

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

• boehm-demers-weiser garbage collector (<= 7.2) • boehm-demers-weiser garbage collector 1.3 • boehm-demers-weiser garbage collector 1.4 • boehm-demers-weiser garbage collector 1.5 • boehm-demers-weiser garbage collector 1.8 • boehm-demers-weiser garbage collector 1.9 • boehm-demers-weiser garbage collector 2.0 • boehm-demers-weiser garbage collector 2.1 • boehm-demers-weiser garbage collector 2.2 • boehm-demers-weiser garbage collector 2.3 • boehm-demers-weiser garbage collector 2.4 • boehm-demers-weiser garbage collector 3.0 • boehm-demers-weiser garbage collector 3.1 • boehm-demers-weiser garbage collector 3.2 • boehm-demers-weiser garbage collector 3.3 • boehm-demers-weiser garbage collector 3.4 • boehm-demers-weiser garbage collector 3.5 • boehm-demers-weiser garbage collector 3.6 • boehm-demers-weiser garbage collector 3.7 • boehm-demers-weiser garbage collector 4.0 • boehm-demers-weiser garbage collector 4.1 • boehm-demers-weiser garbage collector 4.2 • boehm-demers-weiser garbage collector 4.3 • boehm-demers-weiser garbage collector 4.4 • boehm-demers-weiser garbage collector 4.5 • boehm-demers-weiser garbage collector 4.6 • boehm-demers-weiser garbage collector 4.7 • boehm-demers-weiser garbage collector 4.8 • boehm-demers-weiser garbage collector 4.9 • boehm-demers-weiser garbage collector 4.10 • boehm-demers-weiser garbage collector 4.11 • boehm-demers-weiser garbage collector 4.12 • boehm-demers-weiser garbage collector 4.13 • boehm-demers-weiser garbage collector 4.14 • boehm-demers-weiser garbage collector 5.0 • boehm-demers-weiser garbage collector 5.1 • boehm-demers-weiser garbage collector 5.2 • boehm-demers-weiser garbage collector 5.3 • boehm-demers-weiser garbage collector 5.4 • boehm-demers-weiser garbage collector 6.0 • boehm-demers-weiser garbage collector 6.1 • boehm-demers-weiser garbage collector 6.2 • boehm-demers-weiser garbage collector 6.3 • boehm-demers-weiser garbage collector 6.4 • boehm-demers-weiser garbage collector 6.5 • boehm-demers-weiser garbage collector 6.6 • boehm-demers-weiser garbage collector 6.7 • boehm-demers-weiser garbage collector 6.8 • boehm-demers-weiser garbage collector 6.9 • boehm-demers-weiser garbage collector 7.0 • boehm-demers-weiser garbage collector 7.1 • boehm-demers-weiser garbage collector 7.2