Fedora Update for gimp FEDORA-2013-2000

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-5576

Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump XWD plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large 1 red, 2 green, or 3 blue color mask in an XWD file...

CVE-2012-5576

CVE-2012-5576 affects GIMP’s XWD plug-in (file-xwd.c): multiple stack-based buffer overflows when parsing XWD files, leading to possible crash or arbitrary code execution. The issue is triggered by large color masks (red/green/blue) in XWD images. Public advisories/updates show affected GIMP vers...

KLA10168 DoS vulnerability in GIMP

A buffer overflow was found in GIMP. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed XWD file. Original advisories - Related products GIMP CVE list CVE-2012-5576...

[USN-1659-1] GIMP vulnerability

========================================================================== Ubuntu Security Notice USN-1659-1 December 10, 2012 gimp vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

CVE-2012-5576

Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump XWD plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large 1 red, 2 green, or 3 blue color mask in an XWD file...

CVE-2008-5576

CVE-2008-5576 affects sCssBoard versions 1.0, 1.1, 1.11, and 1.12 (admin/forums.php). A remote attacker can bypass authentication and gain administrative access by sending a large value for the current_user[users_level] parameter. This constitutes a parameter manipulation/authentication bypass vu...

CVE-2007-5576

BEA Tuxedo 8.0 prior to RP392 and 8.1 prior to RP293, and WebLogic Enterprise 5.1 prior to RP174, disclose passwords in cleartext via local commands (cnsbind, cnsunbind, cnsls), enabling physically proximate attackers to obtain sensitive information. Affected components: password handling in the ...