Published: 18/12/2012 Updated: 13/02/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a large (1) red, (2) green, or (3) blue color mask in an XWD file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gimp gimp

Synopsis Moderate: gimp security update Type/Severity Security Advisory: Moderate Topic Updated gimp packages that fix three security issues are now available forRed Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability ...

Debian Bug report logs - #693977 gimp: CVE-2012-5576: memory corruption vulnerability affecting 282 Package: gimp; Maintainer for gimp is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Source for gimp is src:gimp (PTS, buildd, popcon) Reported by: Henri Salo <henri@nervfi> Date: Thu, 22 ...

GIMP could be made to crash or run programs as your login if it opened a specially crafted file ...

Murray McAllister discovered multiple integer and buffer overflows in the XWD plugin in Gimp, which can result in the execution of arbitrary code For the oldstable distribution (squeeze), these problems have been fixed in version 2610-1+squeeze4 This update also fixes CVE-2012-3403, CVE-2012-3481 and CVE-2012-5576 For the stable distribution ( ...

CWE-787 http://git.gnome.org/browse/gimp/commit/?id=2873262fccba12af144ed96ed91be144d92ff2e1 http://www.ubuntu.com/usn/USN-1659-1 http://secunia.com/advisories/51479 http://secunia.com/advisories/50296 http://www.securityfocus.com/bid/56647 https://bugzilla.gnome.org/show_bug.cgi?id=687392 http://secunia.com/advisories/51528 http://lists.opensuse.org/opensuse-updates/2012-12/msg00017.html http://www.openwall.com/lists/oss-security/2012/11/27/1 http://lists.opensuse.org/opensuse-updates/2013-01/msg00014.html http://www.mandriva.com/security/advisories?name=MDVSA-2013:082 https://access.redhat.com/errata/RHSA-2013:1778 https://usn.ubuntu.com/1659-1/https://nvd.nist.gov

CVE-2012-5576

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect