RSS   Vulnerabilities for 'GIMP'   RSS

2007-06-07
 
CVE-2007-3126

CWE-Other
 
 
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.

 
2007-07-04
 
CVE-2007-2949

 
 
Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.

 
2007-07-10
 
CVE-2006-4519

CWE-189
 
 
Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.

 
2006-07-06
 
CVE-2006-3404

CWE-Other
 
 
Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property.

 
2005-05-02
 
CVE-2005-0654

 
 
gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) via the image descriptor (1) height or (2) width fields set to zero.

 

 >>> Vendor: The gimp team 2 Products
GIMP
Gimp toolkit

Copyright 2024, cxsecurity.com

 

Back to Top