SuSE 10 Security Update : gimp (ZYPP Patch Number 3993)

Multiple gimp import filters contained integer overflows. Attackers could exploit that to potentially execute code by tricking users into opening specially crafted files. CVE-2006-4519 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : gimp (ZYPP Patch Number 3283)

Specially crafted RAS files could cause a buffer overflow in the SUNRAS plugin. The bug could potentially be exploited to execute arbitrary code. CVE-2007-2356 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Ubuntu 6.06 LTS / 6.10 / 7.04 : gimp vulnerability (USN-494-1)

Sean Larsson discovered multiple integer overflows in Gimp. By tricking a user into opening a specially crafted DICOM, PNM, PSD, PSP, RAS, XBM, or XWD image, a remote attacker could exploit this to execute arbitrary code with the user's privileges. Note that Tenable Network Security has extracted...

Ubuntu 6.06 LTS / 6.10 / 7.04 : gimp vulnerability (USN-480-1)

Stefan Cornelius discovered that Gimp could miscalculate the size of heap buffers when processing PSD images. By tricking a user into opening a specially crafted PSD file with Gimp, an attacker could exploit this to execute arbitrary code with the user's privileges. Note that Tenable Network...

Ubuntu 6.06 LTS / 6.10 / 7.04 : gimp vulnerability (USN-467-1)

It was discovered that Gimp did not correctly handle RAS image format color tables. By tricking a user into opening a specially crafted RAS file with Gimp, an attacker could exploit this to execute arbitrary code with the user's privileges. Note that Tenable Network Security has extracted the...

Ubuntu 5.04 / 5.10 / 6.06 LTS : gimp vulnerability (USN-312-1)

Henning Makholm discovered that gimp did not sufficiently validate the 'numaxes' parameter in XCF files. By tricking a user into opening a specially crafted XCF file with Gimp, an attacker could exploit this to execute arbitrary code with the user's privileges. Note that Tenable Network Security...

Fedora 7 : gimp-2.2.15-3.fc7 (2007-0725)

Wed Jun 27 2007 Nils Philippsen - 2:2.2.15-3 - refuse to open PSD files with insanely large dimensions 244402, fix by Sven Neumann - Wed Jun 13 2007 Nils Philippsen - 2:2.2.15-2 - require gutenprint-plugin or gimp-print-plugin 243593 - Thu May 31 2007 Nils Philippsen - 2:2.2.15-1 - version 2.2.15...

Fedora 7 : gimp-2.2.16-2.fc7 (2007-1044)

Wed Jul 11 2007 Nils Philippsen - 2:2.2.16-2 - don't let gimp-plugin-mgr --uninstall fail %post scriptlet - Mon Jul 9 2007 Nils Philippsen - 2:2.2.16-1 - version 2.2.16 Bugs fixed in GIMP 2.2.16 ========================= - improved input value validation in several file plug-ins bug 453973 -...

Fedora 7 : gimp-2.2.17-1.fc7 (2007-1099)

Fri Jul 13 2007 Nils Philippsen - 2:2.2.17-1 - version 2.2.17 Bugs fixed in GIMP 2.2.17 ========================= - fixed regression in PSD load plug-in bug 456042 - fixed crash when loading a corrupt PSD file bug 327444 - work around for Pango appending ' Not-Rotated' to font names - Wed Jul 11...

openSUSE 10 Security Update : gimp-unstable (gimp-unstable-3281)

Specially crafted RAS files could cause a buffer overflow in the SUNRAS plugin. The bug could potentially be exploited to execute arbitrary code CVE-2007-2356. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE 10 Security Update : gimp-unstable (gimp-unstable-1919)

A buffer overflow was fixed in the xcf loader in GIMP that allows user-complicit attackers to cause a denial of service crash and possibly execute arbitrary code via an XCF file with a large numaxes value in the VECTORS property. CVE-2006-3404 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

openSUSE 10 Security Update : gimp (gimp-3949)

The image editor GIMP was updated to fix a integer overflow in the handling of PSD files. By providing a crafted PSD file and tricking the user to open it an attacker could execute code. CVE-2007-2949 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

openSUSE 10 Security Update : gimp (gimp-3995)

Multiple gimp import filters contained integer overflows. Attackers could exploit that to potentially execute code by tricking users into opening specially crafted files CVE-2006-4519. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE 10 Security Update : gimp (gimp-1921)

A buffer overflow was fixed in the xcf loader in GIMP that allows user-complicit attackers to cause a denial of service crash and possibly execute arbitrary code via an XCF file with a large numaxes value in the VECTORS property. CVE-2006-3404 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

openSUSE 10 Security Update : gimp (gimp-3282)

Specially crafted RAS files could cause a buffer overflow in the SUNRAS plugin. The bug could potentially be exploited to execute arbitrary code CVE-2007-2356. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

gimp security update

CentOS Errata and Security Advisory CESA-2007:0513-01 Updated gimp packages that fix several security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GIMP GNU Image Manipulation Program...

CentOS 3 / 4 / 5 : gimp (CESA-2007:0513)

Updated gimp packages that fix several security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GIMP GNU Image Manipulation Program is an image composition and editing program. Multiple...

gimp security update

CentOS Errata and Security Advisory CESA-2007:0513 Updated gimp packages that fix several security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GIMP GNU Image Manipulation Program is...

GIMP multiple image loader integer overflows

Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in 1 DICOM, 2 PNM, 3 PSD, 4 PSP, 5 Sun RAS, 6 XBM, and 7 XWD files...

Gimp PSD integer overflow

Integer overflow in the seektoandunpackpixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large 1 width or 2 height value...