PT-2011-1105 · Gnu+3 · Gimp-Libs+8

Josh Bressers · Publicado 2011-08-19 · Atualizado 2024-06-15 · CVE-2011-2896

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions gimp-libs version 2.6.9 gimp-devel-tools version 2.6.9 gimp-help-browser version 2.6.9 gimp-devel version 2.6.9 gimp-debuginfo version 2.6.9 gimp version 2.6.9

Description The issue involves multiple vulnerabilities in the gimp packages of CentOS and Red Hat Enterprise Linux operating systems. These vulnerabilities can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information.

Recommendations For gimp-libs version 2.6.9, update to a newer version to mitigate the risk. For gimp-devel-tools version 2.6.9, update to a newer version to mitigate the risk. For gimp-help-browser version 2.6.9, update to a newer version to mitigate the risk. For gimp-devel version 2.6.9, update to a newer version to mitigate the risk. For gimp-debuginfo version 2.6.9, update to a newer version to mitigate the risk. For gimp version 2.6.9, update to a newer version to mitigate the risk.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALT-PU-2018-1360

BDU:2015-06186

BDU:2015-06188

BDU:2015-06189

BDU:2015-06190

BDU:2015-06191

BDU:2015-06192

BDU:2015-08769

BDU:2015-08770

BDU:2015-08771

BDU:2015-08772

BDU:2015-08773

BDU:2015-08774

CESA-2012_1180

CVE-2011-2896

DSA-2354-1

DSA-2426-1

OPENSUSE-SU-2024:10294-1

RHSA-2011:1635

RHSA-2011_1635

RHSA-2012:0302

RHSA-2012:1180

RHSA-2012:1181

RHSA-2012_0302

RHSA-2012_1180

RHSA-2012_1181

USN-1207-1

USN-1214-1

Produtos afetados

Alt Linux

Centos

Red Hat

Gimp

Gimp-Debuginfo

Gimp-Devel

Gimp-Devel-Tools

Gimp-Help-Browser

Gimp-Libs

Referências · 88

• http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065539.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6090 · Nota de Segurança
• http://git.gnome.org/browse/gimp/commit/?id=376ad788c1a1c31d40f18494889c383f6909ebfc · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=730338 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2896 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3481 · Nota de Segurança
• https://rhn.redhat.com/errata/RHSA-2012-1180.html · Nota
• http://secunia.com/advisories/50737 · Nota
• https://errata.altlinux.org/ALT-PU-2018-1360 · Aviso do Fabricante
• https://lists.centos.org/pipermail/centos-announce/2012-August/068288.html · Nota
• https://ubuntu.com/security/notices/USN-1207-1 · Aviso do Fabricante
• http://ubuntu.com/usn/USN-1207-1 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2011-2896 · Nota
• http://securityfocus.com/bid/49148 · Nota
• http://lwn.net/Alerts/512724 · Nota