Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-1559-1
HistorySep 10, 2012 - 12:00 a.m.

GIMP vulnerabilities

2012-09-1000:00:00
ubuntu.com
41

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.5%

JSON

Releases

  • Ubuntu 12.04
  • Ubuntu 11.10
  • Ubuntu 11.04
  • Ubuntu 10.04

Packages

  • gimp - The GNU Image Manipulation Program

Details

Joseph Sheridan discovered that GIMP incorrectly handled certain malformed
headers in FIT files. If a user were tricked into opening a specially
crafted FIT image file, an attacker could cause GIMP to crash.
(CVE-2012-3236)

Murray McAllister discovered that GIMP incorrectly handled malformed KiSS
palette files. If a user were tricked into opening a specially crafted KiSS
palette file, an attacker could cause GIMP to crash, or possibly execute
arbitrary code with the user’s privileges. (CVE-2012-3403)

Matthias Weckbecker discovered that GIMP incorrectly handled malformed GIF
image files. If a user were tricked into opening a specially crafted GIF
image file, an attacker could cause GIMP to crash, or possibly execute
arbitrary code with the user’s privileges. (CVE-2012-3481)

OSVersionArchitecturePackageVersionFilename
Ubuntu12.04noarchgimp< 2.6.12-1ubuntu1.1UNKNOWN
Ubuntu12.04noarchgimp-dbg< 2.6.12-1ubuntu1.1UNKNOWN
Ubuntu12.04noarchlibgimp2.0< 2.6.12-1ubuntu1.1UNKNOWN
Ubuntu12.04noarchlibgimp2.0-dev< 2.6.12-1ubuntu1.1UNKNOWN
Ubuntu11.10noarchgimp< 2.6.11-2ubuntu4.1UNKNOWN
Ubuntu11.10noarchgimp-dbg< 2.6.11-2ubuntu4.1UNKNOWN
Ubuntu11.10noarchlibgimp2.0< 2.6.11-2ubuntu4.1UNKNOWN
Ubuntu11.10noarchlibgimp2.0-dev< 2.6.11-2ubuntu4.1UNKNOWN
Ubuntu11.04noarchgimp< 2.6.11-1ubuntu6.3UNKNOWN
Ubuntu11.04noarchgimp-dbg< 2.6.11-1ubuntu6.3UNKNOWN
Rows per page:
1-10 of 161

Related

openvas 25
nessus 26
securityvulns 4
suse 4
kaspersky 1
fedora 4
redhat 2
centos 2
osv 1
gentoo 1
oraclelinux 2
debiancve 3
prion 3
seebug 1
exploitpack 1
nvd 3
ubuntucve 3
cvelist 3
cve 3
debian 1
exploitdb 1
openvas
openvas
Ubuntu: Security Advisory (USN-1559-1)
2012-09-11 00:00:00
Ubuntu Update for gimp USN-1559-1
2012-09-11 00:00:00
SuSE Update for gimp openSUSE-SU-2012:1080-1 (gimp)
2012-12-13 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : gimp vulnerabilities (USN-1559-1)
2012-09-11 00:00:00
Mandriva Linux Security Advisory : gimp (MDVSA-2013:082)
2013-04-20 00:00:00
openSUSE Security Update : gimp (openSUSE-SU-2012:1080-1)
2014-06-13 00:00:00
securityvulns
securityvulns
[USN-1559-1] GIMP vulnerabilities
2012-09-19 00:00:00
gimp multiple security vulnereabilities
2012-09-19 00:00:00
[ MDVSA-2012:142 ] gimp
2012-08-27 00:00:00
suse
suse
gimp to fix various issues (important)
2012-09-03 11:09:17
Security update for gimp (important)
2012-08-23 16:08:28
Security update for gimp (important)
2012-08-24 23:08:35
kaspersky
kaspersky
KLA10167 DoS vulnerabilities in GIMP
2012-08-25 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: gimp-2.8.2-1.fc17
2012-08-28 23:28:57
[SECURITY] Fedora 16 Update: gimp-2.6.12-2.fc16
2012-09-02 00:25:41
[SECURITY] Fedora 18 Update: gimp-2.8.2-1.fc18
2012-09-17 23:09:59
redhat
redhat
(RHSA-2012:1180) Moderate: gimp security update
2012-08-20 00:00:00
(RHSA-2012:1181) Moderate: gimp security update
2012-08-20 00:00:00
centos
centos
gimp security update
2012-08-20 16:23:59
gimp security update
2012-08-20 15:14:54
osv
osv
gimp - several
2013-12-09 00:00:00
gentoo
gentoo
GIMP: Multiple vulnerabilities
2013-11-10 00:00:00
oraclelinux
oraclelinux
gimp security update
2012-08-20 00:00:00
gimp security update
2012-08-20 00:00:00
debiancve
debiancve
CVE-2012-3236
2012-07-12 21:55:06
CVE-2012-3403
2012-08-25 10:29:49
CVE-2012-3481
2012-08-25 10:29:51
prion
prion
Heap overflow
2012-08-25 10:29:00
Integer overflow
2012-08-25 10:29:00
Null pointer dereference
2012-07-12 21:55:00
seebug
seebug
GIMP 2.8.0 FIT File Format DoS
2014-07-01 00:00:00
exploitpack
exploitpack
GIMP 2.8.0 - .FIT File Format Denial of Service
2012-06-30 00:00:00
nvd
nvd
CVE-2012-3236
2012-07-12 21:55:06
CVE-2012-3403
2012-08-25 10:29:49
CVE-2012-3481
2012-08-25 10:29:51
ubuntucve
ubuntucve
CVE-2012-3403
2012-08-25 00:00:00
CVE-2012-3481
2012-08-25 00:00:00
CVE-2012-3236
2012-06-29 00:00:00
cvelist
cvelist
CVE-2012-3236
2012-07-12 21:00:00
CVE-2012-3481
2012-08-25 10:00:00
CVE-2012-3403
2012-08-25 10:00:00
cve
cve
CVE-2012-3236
2012-07-12 21:55:06
CVE-2012-3403
2012-08-25 10:29:49
CVE-2012-3481
2012-08-25 10:29:51
debian
debian
[SECURITY] [DSA 2813-1] gimp security update
2013-12-09 17:11:44
exploitdb
exploitdb
GIMP 2.8.0 - &#039;.FIT&#039; File Format Denial of Service
2012-06-30 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.5%

JSON
Related for USN-1559-1
openvas25nessus26securityvulns4suse4kaspersky1fedora4redhat2centos2osv1gentoo1oraclelinux2debiancve3prion3seebug1exploitpack1nvd3ubuntucve3cvelist3cve3debian1exploitdb1