PT-2017-3731 · Gnu+3 · Gimp+3
Hanno Böck
·
Publicado
2017-12-20
·
Atualizado
2022-02-07
·
CVE-2017-17788
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
GIMP version 2.8.22
Description:
The issue is related to a stack-based buffer over-read in the
xcf load stream function, located in app/xcf/xcf.c, which occurs when processing a string without a terminating 0 character. This can potentially allow a remote attacker to cause a denial of service or compromise data integrity and confidentiality.Recommendations:
For GIMP version 2.8.22, consider updating to a newer version that addresses this issue, as no specific fix is provided for this version. As a temporary workaround, restrict the use of the
xcf load stream function until a patch is available.Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Gimp
Suse
Ubuntu