Published: 07/01/2011 Updated: 07/11/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image. NOTE: some of these details are obtained from third party information.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gimp gimp 2.6.11

GIMP could be made to run programs as your login if it opened a specially crafted file ...

Debian Bug report logs - #608497 gimp: four buffer overflows Package: gimp; Maintainer for gimp is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Source for gimp is src:gimp (PTS, buildd, popcon) Reported by: "non customers" <non-customers@operamailcom> Date: Fri, 31 Dec 2010 13:39:02 UTC ...

Several vulnerabilities have been identified in GIMP, the GNU Image Manipulation Program CVE-2010-4540 Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-uic in the LIGHTING EFFECTS & LIGHT plugin allows user-assisted remote attackers to cause a denial of service (application crash) or possibly ...

source: wwwsecurityfocuscom/bid/45647/info GIMP is prone to multiple remote stack-based buffer-overflow vulnerabilities because it fails to perform adequate checks on user-supplied input Successfully exploiting these issues may allow remote attackers to execute arbitrary code in the context of the application Failed attacks will cause ...

CWE-787 http://openwall.com/lists/oss-security/2011/01/03/2 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608497 https://bugzilla.redhat.com/show_bug.cgi?id=666793 http://openwall.com/lists/oss-security/2011/01/04/7 http://www.vupen.com/english/advisories/2011/0016 http://osvdb.org/70284 http://secunia.com/advisories/42771 http://www.redhat.com/support/errata/RHSA-2011-0837.html http://www.redhat.com/support/errata/RHSA-2011-0838.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:103 http://www.redhat.com/support/errata/RHSA-2011-0839.html http://secunia.com/advisories/44750 http://secunia.com/advisories/50737 http://security.gentoo.org/glsa/glsa-201209-23.xml http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html http://secunia.com/advisories/48236 http://www.debian.org/security/2012/dsa-2426 https://usn.ubuntu.com/1109-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/35162/

CVE-2010-4543

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect