PT-2011-1600 · Gnu+1 · Gimp+1

Huzaifa Sidhpurwala

·

Publicado

2011-01-07

·

Atualizado

2024-06-15

·

CVE-2010-4541

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions GIMP version 2.6.11
Description The issue is a stack-based buffer overflow in the loadit function in the SPHERE DESIGNER plugin. This can be exploited by user-assisted remote attackers via a long "Number of lights" field in a plugin configuration file, potentially leading to a denial of service (application crash) or possibly the execution of arbitrary code.
Recommendations For GIMP version 2.6.11, consider disabling the SPHERE DESIGNER plugin until a patch is available to prevent potential exploitation. Avoid using the "Number of lights" field in the plugin configuration file with untrusted input.

Correção

DoS

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2010-4541
DSA-2426-1
OPENSUSE-SU-2024:10294-1
RHSA-2011:0837
RHSA-2011:0838
RHSA-2011:0839
RHSA-2011_0837
RHSA-2011_0838
RHSA-2011_0839

Produtos afetados

Gimp
Red Hat