CVE-2012-2763

🗓️ 12 Jul 2012 19:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 149 Views🌐 WEB

Buffer overflow in GIMP 2.6.12 & earlier allows remote code execution

Reporter	Title	Published	Views	Family All 40
0day.today	GIMP 2.6 script-fu Buffer Overflow	31 May 201200:00	–	zdt
0day.today	GIMP script-fu Server Buffer Overflow (metasploit)	2 Jun 201200:00	–	zdt
Circl	CVE-2012-2763	2 Jun 201200:00	–	circl
Check Point Advisories	Gimp Script-Fu Server Buffer Overflow (CVE-2012-2763)	4 Sep 201200:00	–	checkpoint_advisories
Cvelist	CVE-2012-2763	12 Jul 201219:00	–	cvelist
Debian CVE	CVE-2012-2763	12 Jul 201219:00	–	debiancve
Exploit DB	GIMP 2.6 script-fu < 2.8.0 - Buffer Overflow (PoC)	31 May 201200:00	–	exploitdb
Exploit DB	GIMP script-fu - Server Buffer Overflow (Metasploit)	2 Jun 201200:00	–	exploitdb
exploitpack	GIMP 2.6 script-fu 2.8.0 - Buffer Overflow (PoC)	31 May 201200:00	–	exploitpack
Tenable Nessus	GLSA-201209-23 : GIMP: Multiple vulnerabilities	29 Sep 201200:00	–	nessus

NVD

Node

gimp gimpRange≤2.6.13

Source	Link
git	www.git.gnome.org/browse/gimp/commit/
bugzilla	www.bugzilla.gnome.org/show_bug.cgi
reactionpenetrationtesting	www.reactionpenetrationtesting.co.uk/advisories/scriptfu-buffer-overflow-GIMP-2.6.html
openwall	www.openwall.com/lists/oss-security/2012/07/01/1
lists	www.lists.opensuse.org/opensuse-updates/2012-09/msg00043.html
security	www.security.gentoo.org/glsa/glsa-201209-23.xml
openwall	www.openwall.com/lists/oss-security/2012/05/31/1
secunia	www.secunia.com/advisories/50737
lists	www.lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.html

Parameter	Position	Path	Description	CWE
packet payload containing crafted script-fu command	binary	http://www.reactionpenetrationtesting.co.uk/advisories/scriptfu-buffer-overflow-GIMP-2.6.html	Buffer overflow in the GIMP script-fu server via a crafted TCP packet enabling remote code execution.	CWE-120
long string in command to script-fu server	binary	http://www.reactionpenetrationtesting.co.uk/advisories/scriptfu-buffer-overflow-GIMP-2.6.html	Buffer overflow in the GIMP script-fu server via a crafted TCP packet enabling remote code execution.	CWE-120
length field and magic header	binary	http://www.reactionpenetrationtesting.co.uk/advisories/scriptfu-buffer-overflow-GIMP-2.6.html	Buffer overflow in the GIMP script-fu server via a crafted TCP packet enabling remote code execution.	CWE-120

16 Jun 2026 23:42Current

7.9High risk

Vulners AI Score7.9

CVSS 27.5

EPSS0.81722