Published: 19/11/2009 Updated: 07/02/2022

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Integer overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote malicious users to execute arbitrary code via a crafted PSD file that triggers a heap-based buffer overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gimp gimp 2.6.7

Synopsis Moderate: gimp security update Type/Severity Security Advisory: Moderate Topic Updated gimp packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability Sco ...

Stefan Cornelius discovered that GIMP did not correctly handle certain malformed BMP files If a user were tricked into opening a specially crafted BMP file, an attacker could execute arbitrary code with the user’s privileges (CVE-2009-1570) ...

Debian Bug report logs - #555929 gimp: CVE-2009-1570 heap overflow due to integer overflow when parsing bmp files Package: gimp; Maintainer for gimp is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Source for gimp is src:gimp (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> ...

Debian Bug report logs - #556750 gimp: CVE-2009-3909: heap overflow due to integer overflow when parsing psd files Package: gimp; Maintainer for gimp is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Source for gimp is src:gimp (PTS, buildd, popcon) Reported by: Raphael Geissert <geissert@debian ...

Several integer overflows, buffer overflows and memory allocation errors were discovered in the Poppler PDF rendering library, which may lead to denial of service or the execution of arbitrary code if a user is tricked into opening a malformed PDF document An update for the old stable distribution (etch) will be issued soon as version 045-51etc ...

CWE-190 http://secunia.com/secunia_research/2009-43/http://secunia.com/advisories/37348 http://git.gnome.org/cgit/gimp/commit/?id=0e440cb6d4d6ee029667363d244aff61b154c33c http://git.gnome.org/cgit/gimp/commit/?id=9cc8d78ff33b7a36852b74e64b427489cad44d0e http://www.vupen.com/english/advisories/2009/3270 https://bugzilla.gnome.org/show_bug.cgi?id=600741 http://www.securityfocus.com/bid/37040 http://osvdb.org/60178 http://www.debian.org/security/2009/dsa-1941 http://www.mandriva.com/security/advisories?name=MDVSA-2009:332 http://www.vupen.com/english/advisories/2010/1021 http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html http://rhn.redhat.com/errata/RHSA-2012-1181.html http://secunia.com/advisories/50737 http://security.gentoo.org/glsa/glsa-201209-23.xml http://www.securityfocus.com/archive/1/507928/100/0/threaded https://access.redhat.com/errata/RHSA-2012:1181 https://usn.ubuntu.com/880-1/https://nvd.nist.gov

CVE-2009-3909

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect