Huawei EulerOS: Security Advisory for gimp (EulerOS-SA-2019-1741)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : gimp (EulerOS-SA-2019-2471)

According to the version of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Use-after-free vulnerability in the xcfloadimage function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service program...

EulerOS 2.0 SP3 : gimp (EulerOS-SA-2019-2021)

According to the versions of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple use-after-free vulnerabilities were found in GIMP in the channel and layer properties parsing process when loading XCF files.An attacker...

Low: Red Hat Security Advisory: libwmf security update

An update for libwmf is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

libwmf security update

An update is available for libwmf. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libwmf packages provide a library for reading and converting Windows...

ALSA-2019:2722 Low: libwmf security update

The libwmf packages provide a library for reading and converting Windows Metafile Format WMF vector graphics. The library is used by applications such as GIMP and ImageMagick. Security Fixes: gd: double free in the gdImagePtr in gdgifout.c, gdjpeg.c, and gdwbmp.c CVE-2019-6978 For more details...

RLSA-2019:2722 Low: libwmf security update

The libwmf packages provide a library for reading and converting Windows Metafile Format WMF vector graphics. The library is used by applications such as GIMP and ImageMagick. Security Fixes: gd: double free in the gdImagePtr in gdgifout.c, gdjpeg.c, and gdwbmp.c CVE-2019-6978 For more details...

EulerOS 2.0 SP8 : gimp (EulerOS-SA-2019-1761)

According to the version of the gimp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GIMP through 2.10.2 makes ggettmpdir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by th...

EulerOS 2.0 SP2 : gimp (EulerOS-SA-2019-1741)

According to the version of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GIMP through 2.10.2 makes ggettmpdir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by t...

EulerOS 2.0 SP5 : gimp (EulerOS-SA-2019-1675)

According to the version of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GIMP through 2.10.2 makes ggettmpdir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by t...

Arbitrary Code Execution

The GIMP GNU Image Manipulation Program is an image composition and editing program. A stack-based buffer overflow flaw, a heap-based buffer overflow, and an integer overflow flaw were found in the way GIMP loaded certain X Window System XWD image dump files. A remote attacker could provide a...

Integer Overflow

The GIMP GNU Image Manipulation Program is an image composition and editing program. A stack-based buffer overflow flaw, a heap-based buffer overflow, and an integer overflow flaw were found in the way GIMP loaded certain X Window System XWD image dump files. A remote attacker could provide a...

Remote Code Execution (RCE)

gimp is vulnerable to remote code execution RCE attacks. The vulnerability exists due to multiple stack-based buffer overflows in file-xwd.c in the X Window Dump XWD plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large 1...

The vulnerability of the ReadImage function in the GIMP graphic editor, which involves reading beyond the buffer limit of memory, allows attackers to cause service failures, undermine data integrity, and compromise confidentiality.

The vulnerability of the ReadImage function in the GIMP graphic editor’s plug-ins/common/file-tga.c file is related to the issue of writing out images from memory beyond the buffer boundary when reading RGBA images that contain non-standard pixel bit values. Exploiting this vulnerability can allo...

The vulnerability of the xcf_load_stream function in the GIMP graphics editor, which involves reading beyond the buffer limit, allows attackers to cause service failures, compromise data integrity, and undermine data confidentiality.

The vulnerability of the xcfloadstream function /xcf/xcf.c in the GIMP graphic editor, GNU Image Manipulation Program, relates to reading beyond the buffer boundaries during string processing, especially when dealing with strings that do not contain the null character '\0'. Exploiting this...

The vulnerability of the `read_channel_data` function in the GIMP graphic editor’s plug-ins/common/file-psp.c file, related to the issue of exceeding the buffer memory limit, allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the readchanneldata function in the plug-ins/common/file-psp.c file of the GIMP graphic editor, as well as the GNU Image Manipulation Program, is related to the issue of leaving data outside of the memory buffer. Exploiting this vulnerability could allow an attacker to cause...

Ubuntu: Security Advisory (USN-3539-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

spice security update

CentOS Errata and Security Advisory CESA-2018:2732 An update for spice-gtk and spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives ...

Ghostscript - Multiple Vulnerabilities

Exploit for linux platform in category local exploits http://seclists.org/oss-sec/2018/q3/142 These are critical and trivial remote code execution bugs in things like ImageMagick, Evince, GIMP, and most other PDF/PS tools. ---- Hello, this was discussed on the distros list, but it was suggested t...

Ghostscript - Multiple Vulnerabilities

Ghostscript - Multiple Vulnerabilities http://seclists.org/oss-sec/2018/q3/142 These are critical and trivial remote code execution bugs in things like ImageMagick, Evince, GIMP, and most other PDF/PS tools. ---- Hello, this was discussed on the distros list, but it was suggested to move discussi...