Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2006-4519

Published: 10/07/2007 Updated: 07/02/2022
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Gimp

Vulnerability Summary

Multiple integer overflows in the image loader plug-ins in GIMP prior to 2.2.16 allow user-assisted remote malicious users to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gimp gimp

Vendor Advisories

Ubuntu Security Notice: gimp vulnerability
Sean Larsson discovered multiple integer overflows in Gimp By tricking a user into opening a specially crafted DICOM, PNM, PSD, PSP, RAS, XBM, or XWD image, a remote attacker could exploit this to execute arbitrary code with the user’s privileges ...
Debian Security Advisories: DSA-1335-1 gimp -- several vulnerabilities
Several remote vulnerabilities have been discovered in Gimp, the GNU Image Manipulation Program, which might lead to the execution of arbitrary code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-4519 Sean Larsson discovered several integer overflows in the processing code for DICOM, PNM, PSD, ...

References

CWE-190http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=551http://bugzilla.gnome.org/show_bug.cgi?id=451379http://developer.gimp.org/NEWS-2.2http://www.securitytracker.com/id?1018349http://issues.foresightlinux.org/browse/FL-457http://www.debian.org/security/2007/dsa-1335http://security.gentoo.org/glsa/glsa-200707-09.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:170http://www.redhat.com/support/errata/RHSA-2007-0513.htmlhttp://www.ubuntu.com/usn/usn-494-1http://www.securityfocus.com/bid/24835http://secunia.com/advisories/26132http://secunia.com/advisories/26215http://secunia.com/advisories/26240http://secunia.com/advisories/26575http://secunia.com/advisories/26939http://www.vupen.com/english/advisories/2007/2471http://osvdb.org/42145http://osvdb.org/42143http://osvdb.org/42141http://osvdb.org/42144http://osvdb.org/42140http://osvdb.org/42142http://osvdb.org/42139https://exchange.xforce.ibmcloud.com/vulnerabilities/35308https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10842http://www.securityfocus.com/archive/1/475257/100/0/threadedhttps://usn.ubuntu.com/494-1/https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook