PT-2006-4295 · Gnu+1 · Gimp+1
Henning Makholm
·
Publicado
2006-07-06
·
Atualizado
2024-06-15
·
CVE-2006-3404
CVSS v2.0
5.1
Média
| Vetor | AV:N/AC:H/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Gimp versions prior to 2.2.12
Description
The issue is related to a buffer overflow in the
xcf load vector function, which can be triggered by an XCF file containing a large num axes value in the VECTORS property. This could allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code.Recommendations
For versions prior to 2.2.12, update to version 2.2.12 or later to resolve the issue. As a temporary workaround, consider avoiding the use of XCF files with large
num axes values in the VECTORS property until the update is applied.Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gimp
Red Hat