Gimp SUNRAS插件set_color_table()缓冲区溢出漏洞

GIMP是GNU Image Manipulation Program（GNU图像处理程序）的缩写，是一款跨平台的图像处理软件。 GIMP的SUNRAS插件处理还有畸形数据的RAS文件时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 SUNRAS插件中setcolortable函数中存在栈溢出漏洞，plug-ins/common/sunras.c文件中漏洞代码如下： int ncols, j; guchar ColorMap2563; ncols = sunhdr-lrasmaplength / 3; if ncols = 0 return; for j = 0; j...

Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow

No description provided by source. /\ Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow ...

GIMP 2.2.14 - .ras SUNRAS Plugin Buffer Overflow

GIMP 2.2.14 - .ras SUNRAS Plugin Buffer Overflow /\ Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Gimp uses SUNRAS plugin to process .RAS file. But this module is vulnerable to a buffer overflow in setcolortable which leads to code execution. Vulnerable code, sunras.c:862 int ncols, j;...

Gimp 2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =========================================================== Gimp 2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Exploit =========================================================== /\ Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Gimp...

GIMP 2.2.14 - '.ras' SUNRAS Plugin Buffer Overflow

/\ Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Gimp uses SUNRAS plugin to process .RAS file. But this module is vulnerable to a buffer overflow in setcolortable which leads to code execution. Vulnerable code, sunras.c:862 int ncols, j; guchar ColorMap2563; ncols = sunhdr-lrasmaplength / ...

MDKA-2007:024 : gimp

A bug in the GIMP would prevent file names with spaces in them being properly saved, instead substituting %20 for the space in file names. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

Mozilla Firefox 2.0.0.2 - '.GIF' Handling Denial of Service

source: https://www.securityfocus.com/bid/22899/info Firefox is prone to a remote denial-of-service vulnerability. An attacker may exploit this vulnerability to cause the application to crash, resulting in denial-of-service conditions. Little is known regarding this vulnerability; this BID will b...

Mozilla Firefox 2.0.0.2 - .GIF Handling Denial of Service

Mozilla Firefox 2.0.0.2 - .GIF Handling Denial of Service source: https://www.securityfocus.com/bid/22899/info Firefox is prone to a remote denial-of-service vulnerability. An attacker may exploit this vulnerability to cause the application to crash, resulting in denial-of-service conditions...

CentOS 4 : gtk2 (CESA-2007:0019)

Updated gtk2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug...

RHEL 4 : gtk2 (RHSA-2007:0019)

Updated gtk2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug...

DEBIAN-CVE-2007-0010

The GdkPixbufLoader function in GIMP ToolKit GTK+ in GTK 2 gtk2 before 2.4.13 allows context-dependent attackers to cause a denial of service crash via a malformed image file...

CVE-2007-0010

The GdkPixbufLoader function in GIMP ToolKit GTK+ in GTK 2 gtk2 before 2.4.13 allows context-dependent attackers to cause a denial of service crash via a malformed image file...

Fedora Core 5 : gimp-2.2.12-1.fc5 (2006-794)

This new version of GIMP fixes a vulnerability in the loader for the XCF format which is the native image file format for the GIMP. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora Core 4 : gimp-2.2.12-1.fc4 (2006-795)

This new version of GIMP fixes a vulnerability in the loader for the XCF format which is the native image file format for the GIMP. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Mandrake Linux Security Advisory : gimp (MDKSA-2006:127)

A buffer overflow in the xcfloadvector function in app/xcf/xcf-load.c for gimp 2.2.x allows user-complicit attackers to cause a denial of service crash and possibly execute arbitrary code via an XCF file with a large numaxes value in the VECTORS property. Updated packages have been patched to...

Debian DSA-1116-1 : gimp - buffer overflow

Henning Makholm discovered a buffer overflow in the XCF loading code of Gimp, an image editing program. Opening a specially crafted XCF image might cause the application to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

GLSA-200609-14 : ImageMagick: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200609-14 ImageMagick: Multiple Vulnerabilities Tavis Ormandy of the Google Security Team discovered a stack and heap buffer overflow in the GIMP XCF Image decoder and multiple heap and integer overflows in the SUN bitmap decoder...

ImageMagick: Multiple Vulnerabilities

Background ImageMagick is a free software suite to manipulate, convert, and create many image formats. Description Tavis Ormandy of the Google Security Team discovered a stack and heap buffer overflow in the GIMP XCF Image decoder and multiple heap and integer overflows in the SUN bitmap decoder...

Slackware 10.2 / current : gimp (SSA:2006-207-03)

New gimp packages are available for Slackware 10.2 and -current to fix a possible security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2006-207-03. The text itself is copyright C...

GLSA-200607-08 : GIMP: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200607-08 GIMP: Buffer overflow Henning Makholm discovered that the 'xcfloadvector' function is vulnerable to a buffer overflow when loading a XCF file with a large 'numaxes' value. Impact : An attacker could exploit this issue to...