rpm package
opensuse/gimp&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/gimp&distro=openSUSE%20Tumbleweed
Vulnerabilities (31)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2012-5576 | — | < 2.8.18-1.4 | 2.8.18-1.4 | Dec 18, 2012 | Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large (1) red, (2) green, or (3) blue color mask in an XWD file. | ||
| CVE-2012-3236 | — | < 2.8.18-1.4 | 2.8.18-1.4 | Jul 12, 2012 | fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed XTENSION header of a .fit file, as demonstrated using a long string. | ||
| CVE-2011-2896 | — | < 2.8.18-1.4 | 2.8.18-1.4 | Aug 19, 2011 | The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the | ||
| CVE-2010-4543 | — | < 2.8.18-1.4 | 2.8.18-1.4 | Jan 7, 2011 | Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image | ||
| CVE-2010-4542 | — | < 2.8.18-1.4 | 2.8.18-1.4 | Jan 7, 2011 | Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in plug-ins/gfig/gfig-style.c in the GFIG plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Foreground | ||
| CVE-2010-4541 | — | < 2.8.18-1.4 | 2.8.18-1.4 | Jan 7, 2011 | Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long "Number of lig | ||
| CVE-2010-4540 | — | < 2.8.18-1.4 | 2.8.18-1.4 | Jan 7, 2011 | Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code vi | ||
| CVE-2007-2949 | — | < 2.10.24-3.1 | 2.10.24-3.1 | Jul 4, 2007 | Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value. | ||
| CVE-2007-3126 | — | < 2.10.24-3.1 | 2.10.24-3.1 | Jun 8, 2007 | Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237. | ||
| CVE-2007-2356 | — | < 2.10.24-3.1 | 2.10.24-3.1 | Apr 30, 2007 | Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file. | ||
| CVE-2006-3404 | — | < 2.10.24-3.1 | 2.10.24-3.1 | Jul 6, 2006 | Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property. |
- CVE-2012-5576Dec 18, 2012affected < 2.8.18-1.4fixed 2.8.18-1.4
Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large (1) red, (2) green, or (3) blue color mask in an XWD file.
- CVE-2012-3236Jul 12, 2012affected < 2.8.18-1.4fixed 2.8.18-1.4
fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed XTENSION header of a .fit file, as demonstrated using a long string.
- CVE-2011-2896Aug 19, 2011affected < 2.8.18-1.4fixed 2.8.18-1.4
The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the
- CVE-2010-4543Jan 7, 2011affected < 2.8.18-1.4fixed 2.8.18-1.4
Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image
- CVE-2010-4542Jan 7, 2011affected < 2.8.18-1.4fixed 2.8.18-1.4
Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in plug-ins/gfig/gfig-style.c in the GFIG plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Foreground
- CVE-2010-4541Jan 7, 2011affected < 2.8.18-1.4fixed 2.8.18-1.4
Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long "Number of lig
- CVE-2010-4540Jan 7, 2011affected < 2.8.18-1.4fixed 2.8.18-1.4
Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code vi
- CVE-2007-2949Jul 4, 2007affected < 2.10.24-3.1fixed 2.10.24-3.1
Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.
- CVE-2007-3126Jun 8, 2007affected < 2.10.24-3.1fixed 2.10.24-3.1
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
- CVE-2007-2356Apr 30, 2007affected < 2.10.24-3.1fixed 2.10.24-3.1
Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.
- CVE-2006-3404Jul 6, 2006affected < 2.10.24-3.1fixed 2.10.24-3.1
Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property.
Page 2 of 2