USN-2051-1: GIMP vulnerability

Murray McAllister discovered that GIMP incorrectly handled malformed XWD files. If a user were tricked into opening a specially crafted XWD file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges...

Debian Security Advisory DSA 2813-1 (gimp - several vulnerabilities)

Murray McAllister discovered multiple integer and buffer overflows in the XWD plugin in Gimp, which can result in the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2813.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2813-1 using nvtgen 1.0 Script...

[USN-2051-1] GIMP vulnerability

========================================================================== Ubuntu Security Notice USN-2051-1 December 09, 2013 gimp vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

DSA-2813-1 gimp - several

Bulletin has no description...

GNU GIMP memory corruption

Memory corruption on XWD files parsing...

Debian: Security Advisory (DSA-2813-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 / 6 : gimp (ELSA-2013-1778)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1778 advisory. - fix overflow in XWD loader CVE-2013-1913, CVE-2013-1978 Tenable has extracted the preceding description block directly from the Oracle Linux...

gimp: xwd plugin g_new() integer overflow

Integer overflow in the loadimage function in file-xwd.c in the X Window Dump XWD plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large color entries value in an X Window Syste...

gimp: XWD plugin color map heap-based buffer overflow

Heap-based buffer overflow in the readxwdcols function in file-xwd.c in the X Window Dump XWD plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an X Window System XWD image dump with more colors than color map...

gimp security update

2:2.6.9-6 - fix overflow in XWD loader CVE-2013-1913, CVE-2013-1978 2:2.6.9-5 - fix overflow in XWD loader 879302 2:2.6.9-5 - fix overflow in GIF loader 847303 2:2.6.9-5 - fix overflows in GIF, CEL loaders 727800, 839020 2:2.6.9-4.1 - fix various overflows 666793, 703403, 703405, 703407, 704512...

PT-2013-1158 · Gnu +4 · Gimp-Debuginfo +5

Name of the Vulnerable Software and Affected Versions: GIMP versions 2.6.9 and earlier gimp-debuginfo version 2.2.13 Description: The issue is related to a heap-based buffer overflow in the read xwd cols function in the X Window Dump XWD plug-in, which can be exploited by remote attackers using a...

PT-2013-1157 · Gnu +3 · Gimp +3

Name of the Vulnerable Software and Affected Versions: GIMP versions 2.6.9 and earlier Description: The issue is related to an integer overflow in the load image function in the X Window Dump XWD plug-in. This can be triggered by a large color entries value in an X Window System XWD image dump,...

GLSA-201311-05 : GIMP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201311-05 GIMP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in GIMP. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially...

GIMP: Multiple vulnerabilities

Background GIMP is the GNU Image Manipulation Program. Description Multiple vulnerabilities have been discovered in GIMP. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted KiSS palette, GIF image or XWD file...

Fedora 17 : gimp-2.8.4-1.fc17 (2013-2000)

Among other things this update fixes a vulnerability with corrupt XWD files and a crash with newer versions of fontconfig when gimp is quit. Overview of Changes from GIMP 2.8.2 to GIMP 2.8.4 ================================================= GUI : - Better names for the default filters in save and...

GIMP XWD File Handling Stack Buffer Overflow (CVE-2012-5576)

A stack-based buffer overflow vulnerability exists in GNU Image Manipulation Program GIMP...

Stack overflow

Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump XWD plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large 1 red, 2 green, or 3 blue color mask in an XWD file...

CVE-2012-5576

Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump XWD plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large 1 red, 2 green, or 3 blue color mask in an XWD file...

CVE-2012-5576

CVE-2012-5576 affects GIMP’s XWD plug-in (file-xwd.c): multiple stack-based buffer overflows when parsing XWD files, leading to possible crash or arbitrary code execution. The issue is triggered by large color masks (red/green/blue) in XWD images. Public advisories/updates show affected GIMP vers...

KLA10168 DoS vulnerability in GIMP

A buffer overflow was found in GIMP. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed XWD file. Original advisories - Related products GIMP CVE list CVE-2012-5576...