Fedora Core 5 : gimp-2.2.12-1.fc5 (2006-794)

This new version of GIMP fixes a vulnerability in the loader for the XCF format which is the native image file format for the GIMP. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Mandrake Linux Security Advisory : gimp (MDKSA-2006:127)

A buffer overflow in the xcfloadvector function in app/xcf/xcf-load.c for gimp 2.2.x allows user-complicit attackers to cause a denial of service crash and possibly execute arbitrary code via an XCF file with a large numaxes value in the VECTORS property. Updated packages have been patched to...

Debian DSA-1116-1 : gimp - buffer overflow

Henning Makholm discovered a buffer overflow in the XCF loading code of Gimp, an image editing program. Opening a specially crafted XCF image might cause the application to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

GLSA-200609-14 : ImageMagick: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200609-14 ImageMagick: Multiple Vulnerabilities Tavis Ormandy of the Google Security Team discovered a stack and heap buffer overflow in the GIMP XCF Image decoder and multiple heap and integer overflows in the SUN bitmap decoder...

ImageMagick: Multiple Vulnerabilities

Background ImageMagick is a free software suite to manipulate, convert, and create many image formats. Description Tavis Ormandy of the Google Security Team discovered a stack and heap buffer overflow in the GIMP XCF Image decoder and multiple heap and integer overflows in the SUN bitmap decoder...

Slackware 10.2 / current : gimp (SSA:2006-207-03)

New gimp packages are available for Slackware 10.2 and -current to fix a possible security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2006-207-03. The text itself is copyright C...

GLSA-200607-08 : GIMP: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200607-08 GIMP: Buffer overflow Henning Makholm discovered that the 'xcfloadvector' function is vulnerable to a buffer overflow when loading a XCF file with a large 'numaxes' value. Impact : An attacker could exploit this issue to...

[slackware-security] gimp

New gimp packages are available for Slackware 10.2 and -current to fix a possible security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-3404 Here are the details from the Slackware 10.2 ChangeLog:...

[SECURITY] [DSA 1116-1] New gimp packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1116-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 21st, 2006 http://www.debian.org/security/faq -...

RHEL 4 : gimp (RHSA-2006:0598)

Updated gimp packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GIMP GNU Image Manipulation Program is an image composition and editing program. Henning Makho...

CentOS 4 : gimp (CESA-2006:0598)

Updated gimp packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GIMP GNU Image Manipulation Program is an image composition and editing program. Henning Makho...

gimp security update

CentOS Errata and Security Advisory CESA-2006:0598 Updated gimp packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GIMP GNU Image Manipulation Program is an...

security flaw

Buffer overflow in the xcfloadvector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via an XCF file with a large numaxes value in the VECTORS property...

Moderate: Red Hat Security Advisory: gimp security update

Updated gimp packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GIMP GNU Image Manipulation Program is an image composition and editing program. Henning Makho...

Moderate: Red Hat Security Advisory: libwmf security update

Updated libwmf packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Libwmf is a library for reading and converting Windows MetaFile vector graphics WMF. Libwmf is us...

security flaw

Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including 1 wv, 2 abiword, 3 freetype, 4 gimp, 5 libgsf, and 6 imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file...

USN-312-1: gimp vulnerability

Henning Makholm discovered that gimp did not sufficiently validate the 'numaxes' parameter in XCF files. By tricking a user into opening a specially crafted XCF file with Gimp, an attacker could exploit this to execute arbitrary code with the user's privileges...

[SA20976] Gimp XCF Parsing Buffer Overflow Vulnerability

---------------------------------------------------------------------- Reverse Engineer Wanted Secunia offers a Security Specialist position with emphasis on reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerability reports...

GIMP GNU image manipulation program buffer overflow

Buffer overflow on XCF format parsing...

CVE-2006-3404

Buffer overflow in the xcfloadvector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via an XCF file with a large numaxes value in the VECTORS property...