Red Hat Security Advisory

RHSA-2011:0838

gimp security update

Released 2011-05-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5.6.z server) gimp-2:2.2.13-2.0.7.el5_6.2, gimp-2:2.2.13-2.0.7.el5_6.2.i386, gimp-2:2.2.13-2.0.7.el5_6.2.ia64 +9

Fixes 6 records

TI-2009-01486 CVE-2009-1570 · GHSA-433f-rgxw-j2rj

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7…

MEDIUM 51

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-base…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08039 Published 2009-11-13 Fixed CWE-190

TI-2010-04271 CVE-2010-4541 · GHSA-q452-qm55-v79x

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c…

MEDIUM 50

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash)…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06812 Published 2011-01-07 Fixed CWE-787

TI-2010-04273 CVE-2010-4543 · GHSA-6cq7-qh8g-jvqf

Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint…

MEDIUM 49

Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute ar…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.16273 Published 2011-01-07 Fixed CWE-787

TI-2010-04272 CVE-2010-4542 · GHSA-r7vf-8935-3h3p

Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in…

LOW 39

Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in plug-ins/gfig/gfig-style.c in the GFIG plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application cra…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.05569 Published 2011-01-07 Fixed CWE-787

TI-2010-04270 CVE-2010-4540 · GHSA-5pj7-f4q8-vv7g

Stack-based buffer overflow in the load_preset_response function in…

LOW 39

Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of servi…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.06074 Published 2011-01-07 Fixed CWE-787

TI-2011-01028 CVE-2011-1178 · GHSA-8cwf-52cx-rv4m

Multiple integer overflows in the load_image function in file-pcx.c in the Personal…

LOW 38

Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service (application crash) or poss…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.05325 Published 2011-06-06 Fixed CWE-190