Summary
Murray McAllister discovered multiple integer and buffer overflows in the XWD plugin in Gimp, which can result in the execution of arbitrary code.
Solution
For the oldstable distribution (squeeze), these problems have been fixed in version 2.6.10-1+squeeze4. This update also fixes CVE-2012-3403, CVE-2012-3481 and CVE-2012-5576
.
For the stable distribution (wheezy), these problems have been fixed in version 2.8.2-2+deb7u1.
For the unstable distribution (sid), these problems will be fixed soon.
We recommend that you upgrade your gimp packages.
Insight
GIMP lets you draw, paint, edit images, and much more! GIMP includes the functionality and plug-ins of other famous image editing and processing programs.
Affected
gimp on Debian Linux
Detection
This check tests the installed software version using the apt package manager.
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2012-3403, CVE-2012-3481, CVE-2012-5576, CVE-2013-1913, CVE-2013-1978 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities