Red Hat Security Advisory

RHSA-2012:1181

gimp security update

Released 2012-08-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHEL Desktop Workstation (v. 5 client) gimp-2:2.2.13-2.0.7.el5_8.5, gimp-devel-2:2.2.13-2.0.7.el5_8.5, gimp-devel-2:2.2.13-2.0.7.el5_8.5.i386
Red Hat Enterprise Linux (v. 5 server) gimp-2:2.2.13-2.0.7.el5_8.5, gimp-2:2.2.13-2.0.7.el5_8.5.i386, gimp-2:2.2.13-2.0.7.el5_8.5.ia64 +9
Red Hat Enterprise Linux Desktop (v. 5 client) gimp-2:2.2.13-2.0.7.el5_8.5, gimp-2:2.2.13-2.0.7.el5_8.5.i386, gimp-libs-2:2.2.13-2.0.7.el5_8.5 +1

Fixes 5 records

TI-2009-03712 CVE-2009-3909 · GHSA-7456-jpq8-24rh

Integer overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in…

MEDIUM 51

Integer overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a crafted PSD file that triggers a heap-based buffer overflow.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08689 Published 2009-11-19 Partial fix CWE-190

TI-2012-03009 CVE-2012-3481 · GHSA-6gv9-8558-pxw7

Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF…

LOW 38

Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service (application crash) and possibl…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.05142 Published 2012-08-25 Fixed CWE-190

TI-2012-02933 CVE-2012-3403 · GHSA-vr9q-87xx-hm87

Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier…

LOW 38

Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file, which tri…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04954 Published 2012-08-25 Fixed CWE-787

TI-2012-02932 CVE-2012-3402 · GHSA-hphq-v97j-xqw4

Integer overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP…

LOW 37

Integer overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP 2.2.13 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted channels heade…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04277 Published 2012-08-25 Fixed CWE-190

TI-2011-02549 CVE-2011-2896 · GHSA-46mw-xwc9-f8hc

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF…

LOW 37

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.11993 Published 2011-08-19 Partial fix CWE-787