7.5
CVSSv2

CVE-2012-2763

Published: 12/07/2012 Updated: 07/02/2022
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 760
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and previous versions, and possibly 2.6.13, allows remote malicious users to execute arbitrary code via a long string in a command to the script-fu server.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gimp gimp

Exploits

# There is a buffer overflow in the script-fu server component of GIMP # (the GNU Image Manipulation Program) in all 26 versions (Windows and Linux # versions) affecting both # the script-fu console and the script-fu network server A crafted msg to the # script-fu server overflows a buffer and overwrites several function pointers # allowing the ...
## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # web site for more information on licensing and terms of use # metasploitcom/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::R ...