PT-2005-1697 · Gnu · Gimp

Hongzhen Zhou · Published 2005-03-07 · Updated 2022-02-07 · CVE-2005-0654

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions GIMP versions 2.0.5, 2.2.3, and possibly 2.2.4

Description The issue allows remote attackers or local users to cause a denial of service, resulting in an application crash. This can be achieved by setting the height or width fields in the image descriptor to zero.

Recommendations For GIMP version 2.0.5, update to a version where this issue is fixed. For GIMP version 2.2.3, update to a version where this issue is fixed. For GIMP version 2.2.4, if affected, update to a version where this issue is fixed.

Exploit

Fix

Related Identifiers

CVE-2005-0654

Affected Products

Gimp

References · 2

• 🔥 http://marc.info/?l=bugtraq&m=110995346018830&w=2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0654 · Security Note