Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-5576
HistoryNov 27, 2012 - 12:00 a.m.

CVE-2012-5576

2012-11-2700:00:00
ubuntu.com
ubuntu.com
21

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.759 High

EPSS

Percentile

98.2%

Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump
(XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of
service (crash) and possibly execute arbitrary code via a large (1) red,
(2) green, or (3) blue color mask in an XWD file.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchgimp< 2.6.8-2ubuntu1.6UNKNOWN
ubuntu11.10noarchgimp< 2.6.11-2ubuntu4.2UNKNOWN
ubuntu12.04noarchgimp< 2.6.12-1ubuntu1.2UNKNOWN
ubuntu12.10noarchgimp< 2.8.2-1ubuntu1.1UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.759 High

EPSS

Percentile

98.2%