Lucene search

K
cve[email protected]CVE-2012-3403
HistoryAug 25, 2012 - 10:29 a.m.

CVE-2012-3403

2012-08-2510:29:00
CWE-787
web.nvd.nist.gov
42
cve-2012-3403
gimp
kiss
buffer overflow
denial of service
arbitrary code
nvd
security vulnerability

7.6 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.027 Low

EPSS

Percentile

90.3%

Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file, which triggers an “invalid free.”

CPENameOperatorVersion
gimp:gimpgimple2.8.0

7.6 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.027 Low

EPSS

Percentile

90.3%