Launchpad.net

CVE 2013-7437

Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow.

See the CVE page on Mitre.org for more details.