Red Hat Security AdvisoryRHSA-2007:0513
gimp security update
Released 2007-09-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 gimp-1:1.2.3-20.9.el3, gimp-1:1.2.3-20.9.el3.i386, gimp-devel-1:1.2.3-20.9.el3 +3
- Red Hat Enterprise Linux (v. 5 server) gimp-2:2.2.13-2.0.7.el5, gimp-2:2.2.13-2.0.7.el5.i386, gimp-2:2.2.13-2.0.7.el5.ia64 +9
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 gimp-1:1.2.1-7.8.el2_1, gimp-1:1.2.1-7.8.el2_1.i386, gimp-1:1.2.1-7.8.el2_1.ia64 +4
- Red Hat Enterprise Linux AS version 3 gimp-1:1.2.3-20.9.el3, gimp-1:1.2.3-20.9.el3.i386, gimp-1:1.2.3-20.9.el3.ia64 +9
- Red Hat Enterprise Linux AS version 4 gimp-1:2.0.5-7.0.7.el4, gimp-1:2.0.5-7.0.7.el4.i386, gimp-1:2.0.5-7.0.7.el4.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) gimp-2:2.2.13-2.0.7.el5, gimp-2:2.2.13-2.0.7.el5.i386, gimp-libs-2:2.2.13-2.0.7.el5 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) gimp-2:2.2.13-2.0.7.el5, gimp-devel-2:2.2.13-2.0.7.el5, gimp-devel-2:2.2.13-2.0.7.el5.i386
- Red Hat Enterprise Linux Desktop version 4 gimp-1:2.0.5-7.0.7.el4, gimp-1:2.0.5-7.0.7.el4.i386, gimp-devel-1:2.0.5-7.0.7.el4 +1
- Red Hat Enterprise Linux ES version 2.1 gimp-1:1.2.1-7.8.el2_1, gimp-1:1.2.1-7.8.el2_1.i386, gimp-devel-1:1.2.1-7.8.el2_1.i386 +1
- Red Hat Enterprise Linux ES version 3 gimp-1:1.2.3-20.9.el3, gimp-1:1.2.3-20.9.el3.i386, gimp-1:1.2.3-20.9.el3.ia64 +6
- Red Hat Enterprise Linux ES version 4 gimp-1:2.0.5-7.0.7.el4, gimp-1:2.0.5-7.0.7.el4.i386, gimp-1:2.0.5-7.0.7.el4.ia64 +3
- Red Hat Enterprise Linux WS version 2.1 gimp-1:1.2.1-7.8.el2_1, gimp-1:1.2.1-7.8.el2_1.i386, gimp-devel-1:1.2.1-7.8.el2_1.i386 +1
- Red Hat Enterprise Linux WS version 3 gimp-1:1.2.3-20.9.el3, gimp-1:1.2.3-20.9.el3.i386, gimp-1:1.2.3-20.9.el3.ia64 +6
- Red Hat Enterprise Linux WS version 4 gimp-1:2.0.5-7.0.7.el4, gimp-1:2.0.5-7.0.7.el4.i386, gimp-1:2.0.5-7.0.7.el4.ia64 +3
- Red Hat Linux Advanced Workstation 2.1 gimp-1:1.2.1-7.8.el2_1, gimp-1:1.2.1-7.8.el2_1.ia64, gimp-devel-1:1.2.1-7.8.el2_1.ia64 +1
Fixes 3 records
Priority MEDIUM 40
Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height valu…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.07169 · Published 2007-07-04 · Fixed CWE-190
Priority LOW 39
Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS,…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05597 · Published 2007-07-10 · Fixed CWE-190
Priority LOW 25
The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (crash or memory consumption) via crafted image files, as discovered using the fusil…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02621 · Published 2007-08-27 · Fixed
THREATIST.IORead the docs