Red Hat Security AdvisoryRHSA-2011:0837
gimp security update
Released 2011-05-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 gimp-1:2.0.5-7.0.7.el4.1, gimp-1:2.0.5-7.0.7.el4.1.i386, gimp-1:2.0.5-7.0.7.el4.1.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 gimp-1:2.0.5-7.0.7.el4.1, gimp-1:2.0.5-7.0.7.el4.1.i386, gimp-devel-1:2.0.5-7.0.7.el4.1 +1
- Red Hat Enterprise Linux ES version 4 gimp-1:2.0.5-7.0.7.el4.1, gimp-1:2.0.5-7.0.7.el4.1.i386, gimp-1:2.0.5-7.0.7.el4.1.ia64 +3
- Red Hat Enterprise Linux WS version 4 gimp-1:2.0.5-7.0.7.el4.1, gimp-1:2.0.5-7.0.7.el4.1.i386, gimp-1:2.0.5-7.0.7.el4.1.ia64 +3
Fixes 4 records
Priority MEDIUM 51
Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-base…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08039 · Published 2009-11-13 · Fixed CWE-190
Priority MEDIUM 50
Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash)…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06812 · Published 2011-01-07 · Fixed CWE-787
Priority MEDIUM 49
Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute ar…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.16273 · Published 2011-01-07 · Fixed CWE-787
Priority LOW 38
Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service (application crash) or poss…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05325 · Published 2011-06-06 · Fixed CWE-190
THREATIST.IORead the docs