PT-2017-3729 · Gnu+3 · Gimp+3

Hanno Böck

·

Publicado

2017-12-20

·

Atualizado

2022-02-07

·

CVE-2017-17786

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: GIMP version 2.8.22
Description: The issue is related to a heap-based buffer over-read in the ReadImage function in plug-ins/common/file-tga.c, specifically when handling RGBA images with unexpected bits-per-pixel values. This can potentially allow a remote attacker to cause a denial of service or compromise data integrity and confidentiality.
Recommendations: For GIMP version 2.8.22, consider updating to a newer version that addresses this issue, as no specific workaround is provided for this version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2018-1717
BDU:2018-01591
CVE-2017-17786
DLA-1220-1
DSA-4077-1
MGASA-2018-0030
MGASA-2018-0273
OPENSUSE-SU-2021:0027-1
OPENSUSE-SU-2021_0027-1
SUSE-SU-2020:0601-1
SUSE-SU-2021:0014-1
SUSE-SU-2021:0015-1
USN-3539-1

Produtos afetados

Alt Linux
Gimp
Suse
Ubuntu