RedHatRHSA-2007:0513(RHSA-2007:0513) Moderate: gimp security update
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.29 Low
EPSS
Percentile
96.4%
The GIMP (GNU Image Manipulation Program) is an image composition and
editing program.
Multiple integer overflow and input validation flaws were found in The
GIMP’s image loaders. An attacker could create a carefully crafted image
file that could cause The GIMP to crash or possibly execute arbitrary code
if the file was opened by a victim. (CVE-2006-4519, CVE-2007-2949,
CVE-2007-3741)
Users of The GIMP should update to these erratum packages, which contain a
backported fix to correct these issues.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 3 | ppc | gimp-perl | < 1.2.3-20.9.el3 | gimp-perl-1.2.3-20.9.el3.ppc.rpm |
| RedHat | 5 | ia64 | gimp-libs | < 2.2.13-2.0.7.el5 | gimp-libs-2.2.13-2.0.7.el5.ia64.rpm |
| RedHat | 5 | i386 | gimp | < 2.2.13-2.0.7.el5 | gimp-2.2.13-2.0.7.el5.i386.rpm |
| RedHat | 3 | i386 | gimp-perl | < 1.2.3-20.9.el3 | gimp-perl-1.2.3-20.9.el3.i386.rpm |
| RedHat | 4 | ia64 | gimp | < 2.0.5-7.0.7.el4 | gimp-2.0.5-7.0.7.el4.ia64.rpm |
| RedHat | 5 | ia64 | gimp-devel | < 2.2.13-2.0.7.el5 | gimp-devel-2.2.13-2.0.7.el5.ia64.rpm |
| RedHat | 4 | s390x | gimp-devel | < 2.0.5-7.0.7.el4 | gimp-devel-2.0.5-7.0.7.el4.s390x.rpm |
| RedHat | 5 | s390 | gimp-libs | < 2.2.13-2.0.7.el5 | gimp-libs-2.2.13-2.0.7.el5.s390.rpm |
| RedHat | 3 | i386 | gimp | < 1.2.3-20.9.el3 | gimp-1.2.3-20.9.el3.i386.rpm |
| RedHat | 5 | s390 | gimp-devel | < 2.2.13-2.0.7.el5 | gimp-devel-2.2.13-2.0.7.el5.s390.rpm |
Related
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.29 Low
EPSS
Percentile
96.4%