Firefox / Evince / EoG / GIMP - '.SVG' File Processing Denial of Service

source: https://www.securityfocus.com/bid/30149/info Multiple vendors' SVG implementations are prone to an unspecified denial-of-service vulnerability. This issue arises when the software handles maliciously crafted SVG images. According to reports, the latest versions of Firefox, Evince, EoG, an...

Debian Security Advisory DSA 1335-1 (gimp)

The remote host is missing an update to gimp announced via advisory DSA 1335-1. OpenVAS Vulnerability Test $Id: deb13351.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1335-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1116)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1116-1 (gimp)

The remote host is missing an update to gimp announced via advisory DSA 1116-1. Henning Makholm discovered a buffer overflow in the XCF loading code of Gimp, an image editing program. Opening a specially crafted XCF image might cause the application to execute arbitrary code. OpenVAS Vulnerabilit...

Debian Security Advisory DSA 1301-1 (gimp)

The remote host is missing an update to gimp announced via advisory DSA 1301-1. OpenVAS Vulnerability Test $Id: deb13011.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1301-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1335-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1301-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : gimp (ZYPP Patch Number 3283)

Specially crafted RAS files could cause a buffer overflow in the SUNRAS plugin. The bug could potentially be exploited to execute arbitrary code. CVE-2007-2356 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : gimp (ZYPP Patch Number 3962)

The image editor gimp was updated to fix a integer overflow in the handling of PSD files. By providing a crafted PSD file and tricking the user to open it an attacker could execute code. CVE-2007-2949 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE 10 Security Update : gimp (ZYPP Patch Number 3993)

Multiple gimp import filters contained integer overflows. Attackers could exploit that to potentially execute code by tricking users into opening specially crafted files. CVE-2006-4519 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : gimp (ZYPP Patch Number 1920)

A buffer overflow was fixed in the xcf loader in GIMP that allows user-complicit attackers to cause a denial of service crash and possibly execute arbitrary code via an XCF file with a large numaxes value in the VECTORS property. CVE-2006-3404 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Ubuntu 6.06 LTS / 6.10 / 7.04 : gimp vulnerability (USN-467-1)

It was discovered that Gimp did not correctly handle RAS image format color tables. By tricking a user into opening a specially crafted RAS file with Gimp, an attacker could exploit this to execute arbitrary code with the user's privileges. Note that Tenable Network Security has extracted the...

Ubuntu 6.06 LTS / 6.10 / 7.04 : gimp vulnerability (USN-480-1)

Stefan Cornelius discovered that Gimp could miscalculate the size of heap buffers when processing PSD images. By tricking a user into opening a specially crafted PSD file with Gimp, an attacker could exploit this to execute arbitrary code with the user's privileges. Note that Tenable Network...

Ubuntu 5.04 / 5.10 / 6.06 LTS : gimp vulnerability (USN-312-1)

Henning Makholm discovered that gimp did not sufficiently validate the 'numaxes' parameter in XCF files. By tricking a user into opening a specially crafted XCF file with Gimp, an attacker could exploit this to execute arbitrary code with the user's privileges. Note that Tenable Network Security...

Ubuntu 6.06 LTS / 6.10 / 7.04 : gimp vulnerability (USN-494-1)

Sean Larsson discovered multiple integer overflows in Gimp. By tricking a user into opening a specially crafted DICOM, PNM, PSD, PSP, RAS, XBM, or XWD image, a remote attacker could exploit this to execute arbitrary code with the user's privileges. Note that Tenable Network Security has extracted...

Fedora 7 : gimp-2.2.17-1.fc7 (2007-1099)

Fri Jul 13 2007 Nils Philippsen - 2:2.2.17-1 - version 2.2.17 Bugs fixed in GIMP 2.2.17 ========================= - fixed regression in PSD load plug-in bug 456042 - fixed crash when loading a corrupt PSD file bug 327444 - work around for Pango appending ' Not-Rotated' to font names - Wed Jul 11...

Fedora 7 : gimp-2.2.15-3.fc7 (2007-0725)

Wed Jun 27 2007 Nils Philippsen - 2:2.2.15-3 - refuse to open PSD files with insanely large dimensions 244402, fix by Sven Neumann - Wed Jun 13 2007 Nils Philippsen - 2:2.2.15-2 - require gutenprint-plugin or gimp-print-plugin 243593 - Thu May 31 2007 Nils Philippsen - 2:2.2.15-1 - version 2.2.15...

Fedora 7 : gimp-2.2.16-2.fc7 (2007-1044)

Wed Jul 11 2007 Nils Philippsen - 2:2.2.16-2 - don't let gimp-plugin-mgr --uninstall fail %post scriptlet - Mon Jul 9 2007 Nils Philippsen - 2:2.2.16-1 - version 2.2.16 Bugs fixed in GIMP 2.2.16 ========================= - improved input value validation in several file plug-ins bug 453973 -...

openSUSE 10 Security Update : gimp (gimp-3995)

Multiple gimp import filters contained integer overflows. Attackers could exploit that to potentially execute code by tricking users into opening specially crafted files CVE-2006-4519. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE 10 Security Update : gimp (gimp-3949)

The image editor GIMP was updated to fix a integer overflow in the handling of PSD files. By providing a crafted PSD file and tricking the user to open it an attacker could execute code. CVE-2007-2949 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...