MiracleLinux 4 : gimp-2.6.9-6.0.1.AXS4 (AXSA:2014-037:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-037:01 advisory. GIMP GNU Image Manipulation Program is a powerful image composition and editing program, which can be extremely useful for creating logos and other...

EUVD-2013-1907

Malware in sbrugna...

SUSE CVE-2012-5576

Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump XWD plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large 1 red, 2 green, or 3 blue color mask in an XWD file...

SUSE CVE-2013-1978

Heap-based buffer overflow in the readxwdcols function in file-xwd.c in the X Window Dump XWD plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an X Window System XWD image dump with more colors than color map...

DEBIAN-CVE-2013-1913

Integer overflow in the loadimage function in file-xwd.c in the X Window Dump XWD plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large color entries value in an X Window Syste...

PT-2013-1157 · Gnu +3 · Gimp +3

Name of the Vulnerable Software and Affected Versions: GIMP versions 2.6.9 and earlier Description: The issue is related to an integer overflow in the load image function in the X Window Dump XWD plug-in. This can be triggered by a large color entries value in an X Window System XWD image dump,...

PT-2013-1158 · Gnu +4 · Gimp-Debuginfo +5

Name of the Vulnerable Software and Affected Versions: GIMP versions 2.6.9 and earlier gimp-debuginfo version 2.2.13 Description: The issue is related to a heap-based buffer overflow in the read xwd cols function in the X Window Dump XWD plug-in, which can be exploited by remote attackers using a...

CVE-2012-5576

CVE-2012-5576 affects GIMP’s XWD plug-in (file-xwd.c): multiple stack-based buffer overflows when parsing XWD files, leading to possible crash or arbitrary code execution. The issue is triggered by large color masks (red/green/blue) in XWD images. Public advisories/updates show affected GIMP vers...