gimp vulnerability

2006-07-1000:00:00

ubuntu.com

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.5%

JSON

Releases

Ubuntu 6.06
Ubuntu 5.10
Ubuntu 5.04

Details

Henning Makholm discovered that gimp did not sufficiently validate the
‘num_axes’ parameter in XCF files. By tricking a user into opening a
specially crafted XCF file with Gimp, an attacker could exploit this
to execute arbitrary code with the user’s privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.06noarchlibgimp2.0< 2.2.11-1ubuntu3.1UNKNOWN
Ubuntu6.06noarchgimp< 2.2.11-1ubuntu3.1UNKNOWN
Ubuntu5.10noarchlibgimp2.0< 2.2.8-2ubuntu6.1UNKNOWN
Ubuntu5.10noarchgimp< 2.2.8-2ubuntu6.1UNKNOWN
Ubuntu5.04noarchlibgimp2.0< 2.2.2-1ubuntu5.1UNKNOWN
Ubuntu5.04noarchgimp< 2.2.2-1ubuntu5.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.06	noarch	libgimp2.0	< 2.2.11-1ubuntu3.1	UNKNOWN
Ubuntu	6.06	noarch	gimp	< 2.2.11-1ubuntu3.1	UNKNOWN
Ubuntu	5.10	noarch	libgimp2.0	< 2.2.8-2ubuntu6.1	UNKNOWN
Ubuntu	5.10	noarch	gimp	< 2.2.8-2ubuntu6.1	UNKNOWN
Ubuntu	5.04	noarch	libgimp2.0	< 2.2.2-1ubuntu5.1	UNKNOWN
Ubuntu	5.04	noarch	gimp	< 2.2.2-1ubuntu5.1	UNKNOWN