CVE-2010-4540
8.2 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
80.0%
Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the “LIGHTING EFFECTS > LIGHT” plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Position field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. NOTE: some of these details are obtained from third party information.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=608497
lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
openwall.com/lists/oss-security/2011/01/03/2
openwall.com/lists/oss-security/2011/01/04/7
osvdb.org/70282
secunia.com/advisories/42771
secunia.com/advisories/44750
secunia.com/advisories/48236
secunia.com/advisories/50737
security.gentoo.org/glsa/glsa-201209-23.xml
www.debian.org/security/2012/dsa-2426
www.mandriva.com/security/advisories?name=MDVSA-2011:103
www.redhat.com/support/errata/RHSA-2011-0838.html
www.redhat.com/support/errata/RHSA-2011-0839.html
www.vupen.com/english/advisories/2011/0016
bugzilla.redhat.com/show_bug.cgi?id=666793
exchange.xforce.ibmcloud.com/vulnerabilities/64582
Social References
More
Related
8.2 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
80.0%