Red Hat Security Advisory

RHSA-2011:0839

gimp security update

Released 2011-05-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 6) gimp-2:2.6.9-4.el6_1.1, gimp-help-browser-2:2.6.9-4.el6_1.1, gimp-libs-2:2.6.9-4.el6_1.1
Red Hat Enterprise Linux Server Optional (v. 6) gimp-2:2.6.9-4.el6_1.1, gimp-devel-2:2.6.9-4.el6_1.1, gimp-devel-2:2.6.9-4.el6_1.1.ppc +3

Fixes 4 records

TI-2010-04271 CVE-2010-4541 · GHSA-q452-qm55-v79x

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c…

MEDIUM 50

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash)…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06812 Published 2011-01-07 Fixed CWE-787

TI-2010-04273 CVE-2010-4543 · GHSA-6cq7-qh8g-jvqf

Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint…

MEDIUM 49

Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute ar…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.16273 Published 2011-01-07 Fixed CWE-787

TI-2010-04272 CVE-2010-4542 · GHSA-r7vf-8935-3h3p

Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in…

LOW 39

Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in plug-ins/gfig/gfig-style.c in the GFIG plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application cra…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.05569 Published 2011-01-07 Fixed CWE-787

TI-2010-04270 CVE-2010-4540 · GHSA-5pj7-f4q8-vv7g

Stack-based buffer overflow in the load_preset_response function in…

LOW 39

Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of servi…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.06074 Published 2011-01-07 Fixed CWE-787