[Bug 849693] CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary

[Red Hat Bugzilla]

Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=849693

Jan Kratochvil  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
              Flags|                            |needinfo?(jlieskov@redhat.c
                   |                            |om)

--- Comment #31 from Jan Kratochvil  ---
Jan,
is this bug therefore an "arbitrary code execution" exploitable or not?

IMO it is not, therefore it is a normal uninteresting crasher bug which has
been fixed upstream now and which is IMO not even worth a backport.  There are
many such uninteresting invalid-input crasher bugs in GNU toolchain (see
Comment 2).