CVE-2016-4994

Use-after-free vulnerability in the xcfloadimage function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted XCF file...

CVE-2016-4994

Use-after-free vulnerability in the xcfloadimage function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted XCF file...

KLA10860 Code execution vulnerability in GIMP

Use-after-free vulnerability was found in GIMP. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed XCF file. Technical details This vulnerability related to xcfloadimage...

Ubuntu 14.04 LTS : GIMP vulnerability (USN-3025-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3025-1 advisory. It was discovered that GIMP incorrectly handled malformed XCF files. If a user were tricked into opening a specially crafted XCF file, an attacker could cause GIM...

USN-3025-1: GIMP vulnerability

It was discovered that GIMP incorrectly handled malformed XCF files. If a user were tricked into opening a specially crafted XCF file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges...

[SECURITY] [DSA 3612-1] gimp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3612-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 01, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3612-1] gimp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3612-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 01, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3612-1 (gimp - security update)

Shmuel H discovered that GIMP, the GNU Image Manipulation Program, is prone to a use-after-free vulnerability in the channel and layer properties parsing process when loading a XCF file. An attacker can take advantage of this flaw to potentially execute arbitrary code with the privileges of the...

DSA-3612-1 gimp - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3612-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-4994

Use-after-free vulnerability in the xcfloadimage function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted XCF file...

UBUNTU-CVE-2016-4994

Use-after-free vulnerability in the xcfloadimage function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted XCF file...

Lattice Semiconductor ispVM System XCF File Handling Overflow

A stack buffer overflow vulnerability has been reported in ispVM System. The vulnerability is due to the improper validation of specially crafted XCF files. A remote attacker can exploit this issue by enticing the victim to accept and open a specially crafted XCF file. Successful exploitation wou...

IrfanView ImXCF.dll XCF File Handling Overflow

The version of the XCF plugin ImXCF.dll for IrfanView is earlier than 1.8.0.1314. As such, it reportedly is affected by a stack-based buffer overflow caused by insufficient validation when processing XCF files. An attacker could exploit this vulnerability to execute arbitrary code by tricking a...

CVE-2012-2614

Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a denial of service application crash and execute arbitrary code via a long string in a version attribute of an ispXCF element in an .xcf file...

Buffer overflow

Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a denial of service application crash and execute arbitrary code via a long string in a version attribute of an ispXCF element in an .xcf file...

CVE-2012-2614

Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a denial of service application crash and execute arbitrary code via a long string in a version attribute of an ispXCF element in an .xcf file...

Lattice Diamond Programmer buffer overflow

Code execution via .xcf files...

Lattice Diamond Programmer Buffer Overflow

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Lattice Diamond Programmer Buffer Overflow 1. Advisory Information Title: Lattice Diamond Programmer Buffer Overflow Advisory ID: CORE-2012-0530 Advisory URL:...

Lattice Diamond Programmer 1.4.2 - Buffer Overflow (PoC)

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Lattice Diamond Programmer Buffer Overflow 1. Advisory Information Title: Lattice Diamond Programmer Buffer Overflow Advisory ID: CORE-2012-0530 Advisory URL:...