GIMP 安全漏洞

GIMP is an open source bitmap image editor from the GIMP team. A security vulnerability exists in GIMP versions 2.10.30 and 2.99.10 that stems from vulnerability to buffer overflows. An attacker exploiting this vulnerability could cause an out of memory or program crash via a crafted XCF file...

CVE-2022-30067

GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash...

CVE-2022-30067: Buffer Copy without Checking Size of Input

GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash...

CVE-2022-30067

GIMP 2.10.30 and 2.99.10 are vulnerable to a crafted-XCF buffer overflow that can exhaust memory or crash the program. Debian LTS DLA-4431-1 fixes CVE-2022-30067 in gimp 2.10.22-4+deb11u5; multiple advisories corroborate the issue and propose upgrading. If exploiting vectors are not detailed in t...

PT-2022-6739

Name of the Vulnerable Software and Affected Versions GIMP versions 2.10.30 through 2.10.30 GIMP version 2.99.10 Description The issue is related to a buffer overflow vulnerability. It can be exploited by a remote attacker using a specially crafted XCF file, which causes the program to allocate a...

Mageia: Security Advisory (MGASA-2019-0364)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0397)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-33489

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

CVE-2021-33489

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

CVE-2021-33489

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

Design/Logic Flaw

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

CVE-2021-33489

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

CVE-2021-33489

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

PT-2021-20150

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.5 and earlier Description The issue allows for cross-site scripting XSS attacks via JavaScript code in a shared XCF file. This can potentially lead to the execution of malicious scripts on the client-side...

CVE-2021-33489: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

UBUNTU-CVE-2021-36083

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE...

kimageformats:kimgio_xcf_fuzzer: Stack-buffer-overflow in XCFImageFormat::loadTileRLE

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5535712133906432 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioxcffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

Arbitrary Code Execution

An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm binaries of xcftools 1.0.7. An integer overflow can occur while calculating the row's allocation size, that could be exploited to corrupt memory and eventually execute arbitrary...

kimageformats:kimgio_xcf_fuzzer: Segv on unknown address in QPainterPrivate::attachPainterPrivate

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5665698529542144 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioxcffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State...

kimageformats:kimgio_xcf_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5641852283518976 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000103e1e000 Crash State: NULL Sanitizer: address ASA...