GIMP Security Vulnerabilities

GIMP is an open source bitmap image editor from the GIMP team. A security vulnerability exists in GIMP that originates from opening incorrectly formatted DDS, PSD, and PSP files could result in a denial of service or execution of arbitrary code...

Debian: Security Advisory (DSA-5564-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-5564-1 : gimp - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5564 advisory. Michael Randrianantenaina reported several vulnerabilities in GIMP, the GNU Image Manipulation Program, which could result in denial of service application...

[SECURITY] [DSA 5564-1] gimp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5564-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 24, 2023 https://www.debian.org/security/faq -...

DSA-5564-1 gimp - security update

Bulletin has no description...

Debian: Security Advisory (DLA-3659-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3659-1] gimp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3659-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk November 21, 2023 https://wiki.debian.org/LTS -...

Debian dla-3659 : gimp - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3659 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3659-1 [email protected]...

DLA-3659-1 gimp - security update

Bulletin has no description...

Slackware: Security Advisory (SSA:2023-320-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] gimp

New gimp packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/gimp-2.10.36-i586-1slack15.0.txz: Upgraded. This release fixes security issues: If a user loads a malicious DDS, PSD, or PSP file, this...

SUSE CVE-2023-44442

GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

SUSE CVE-2023-44441

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

SUSE CVE-2023-44444

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicio...

CVE-2023-44442

A parsing vulnerability was found in the GNU Image Manipulation Program GIMP. This flaw allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSD file, possibly enabling the execution of unauthorized code within the GIMP process. Mitigation Mitigation for this...

CVE-2023-44444

A parsing vulnerability was found in the GNU Image Manipulation Program GIMP. This flaw allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSP file, possibly enabling the execution of unauthorized code within the GIMP process. Mitigation Mitigation for this...

CVE-2023-44441

A parsing vulnerability was found in the GNU Image Manipulation Program GIMP. This flaw allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious DDS file, possibly enabling the execution of unauthorized code within the GIMP process. Mitigation Mitigation for this...

CVE-2023-44443

A parsing vulnerability was found in the GNU Image Manipulation Program GIMP. This flaw allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSP file, possibly enabling the execution of unauthorized code within the GIMP process. Mitigation Mitigation for this...

Slackware Linux 15.0 / current gimp Multiple Vulnerabilities (SSA:2023-320-01)

The version of gimp installed on the remote host is prior to 2.10.36. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-320-01 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version numbe...

CVE-2023-44443

GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...