GIMP vulnerability

2011-09-2200:00:00

ubuntu.com

7.6 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

87.8%

JSON

Releases

Ubuntu 11.04
Ubuntu 10.10
Ubuntu 10.04

Packages

gimp - The GNU Image Manipulation Program

Details

Tomas Hoger discovered that GIMP incorrectly handled malformed LZW streams.
If a user were tricked into opening a specially crafted GIF image file, an
attacker could cause GIMP to crash, or possibly execute arbitrary code with
the user’s privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu11.04noarchgimp< 2.6.11-1ubuntu6.2UNKNOWN
Ubuntu11.04noarchgimp-dbg< 2.6.11-1ubuntu6.2UNKNOWN
Ubuntu11.04noarchlibgimp2.0< 2.6.11-1ubuntu6.2UNKNOWN
Ubuntu11.04noarchlibgimp2.0-dev< 2.6.11-1ubuntu6.2UNKNOWN
Ubuntu10.10noarchgimp< 2.6.10-1ubuntu3.4UNKNOWN
Ubuntu10.10noarchgimp-dbg< 2.6.10-1ubuntu3.4UNKNOWN
Ubuntu10.10noarchlibgimp2.0< 2.6.10-1ubuntu3.4UNKNOWN
Ubuntu10.10noarchlibgimp2.0-dev< 2.6.10-1ubuntu3.4UNKNOWN
Ubuntu10.04noarchgimp< 2.6.8-2ubuntu1.4UNKNOWN
Ubuntu10.04noarchgimp-dbg< 2.6.8-2ubuntu1.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	11.04	noarch	gimp	< 2.6.11-1ubuntu6.2	UNKNOWN
Ubuntu	11.04	noarch	gimp-dbg	< 2.6.11-1ubuntu6.2	UNKNOWN
Ubuntu	11.04	noarch	libgimp2.0	< 2.6.11-1ubuntu6.2	UNKNOWN
Ubuntu	11.04	noarch	libgimp2.0-dev	< 2.6.11-1ubuntu6.2	UNKNOWN
Ubuntu	10.10	noarch	gimp	< 2.6.10-1ubuntu3.4	UNKNOWN
Ubuntu	10.10	noarch	gimp-dbg	< 2.6.10-1ubuntu3.4	UNKNOWN
Ubuntu	10.10	noarch	libgimp2.0	< 2.6.10-1ubuntu3.4	UNKNOWN
Ubuntu	10.10	noarch	libgimp2.0-dev	< 2.6.10-1ubuntu3.4	UNKNOWN
Ubuntu	10.04	noarch	gimp	< 2.6.8-2ubuntu1.4	UNKNOWN
Ubuntu	10.04	noarch	gimp-dbg	< 2.6.8-2ubuntu1.4	UNKNOWN