CVE-2013-1978

🗓️ 12 Dec 2013 18:10:55Reported by redhatType

Heap-based buffer overflow in read_xwd_cols function in file-xwd.c in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an X Window System imag

Reporter	Title	Published	Views	Family All 54
Check Point Advisories	GIMP XWD File Handling Heap Buffer Overflow (CVE-2013-1978)	22 Dec 201300:00	–	checkpoint_advisories
UbuntuCve	CVE-2013-1978	4 Dec 201300:00	–	ubuntucve
Prion	Heap overflow	12 Dec 201318:55	–	prion
Cvelist	CVE-2013-1978	12 Dec 201318:00	–	cvelist
NVD	CVE-2013-1978	12 Dec 201318:55	–	nvd
Debian CVE	CVE-2013-1978	12 Dec 201318:55	–	debiancve
Tenable Nessus	Fedora 19 : gimp-2.8.10-4.fc19 (2013-22776)	17 Dec 201300:00	–	nessus
Tenable Nessus	Fedora 18 : gimp-2.8.10-4.fc18 (2013-22771)	17 Dec 201300:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : gimp (MDVSA-2013:293)	18 Dec 201300:00	–	nessus
Tenable Nessus	Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : gimp vulnerability (USN-2051-1)	10 Dec 201300:00	–	nessus

Nvd

Node

gimp gimpRange≤2.6.9

AND

gnome glibRange≤2.24.0

Node

redhat enterprise_linuxMatch5.0

redhat enterprise_linuxMatch6.0

Source	Link
securityfocus	www.securityfocus.com/bid/64098
debian	www.debian.org/security/2013/dsa-2813
security	www.security.gentoo.org/glsa/201603-01
rhn	www.rhn.redhat.com/errata/RHSA-2013-1778.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
ubuntu	www.ubuntu.com/usn/USN-2051-1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Dec 2013 18:55Current

7.9High risk

Vulners AI Score7.9

CVSS26.8

EPSS0.06074

CWE-787