PT-2011-1105 · Gnu+3 · Gimp-Libs+8

Josh Bressers · Published 2011-08-19 · Updated 2024-06-15 · CVE-2011-2896

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions gimp-libs version 2.6.9 gimp-devel-tools version 2.6.9 gimp-help-browser version 2.6.9 gimp-devel version 2.6.9 gimp-debuginfo version 2.6.9 gimp version 2.6.9

Description The issue involves multiple vulnerabilities in the gimp packages of CentOS and Red Hat Enterprise Linux operating systems. These vulnerabilities can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information.

Recommendations For gimp-libs version 2.6.9, update to a newer version to mitigate the risk. For gimp-devel-tools version 2.6.9, update to a newer version to mitigate the risk. For gimp-help-browser version 2.6.9, update to a newer version to mitigate the risk. For gimp-devel version 2.6.9, update to a newer version to mitigate the risk. For gimp-debuginfo version 2.6.9, update to a newer version to mitigate the risk. For gimp version 2.6.9, update to a newer version to mitigate the risk.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2018-1360

BDU:2015-06186

BDU:2015-06188

BDU:2015-06189

BDU:2015-06190

BDU:2015-06191

BDU:2015-06192

BDU:2015-08769

BDU:2015-08770

BDU:2015-08771

BDU:2015-08772

BDU:2015-08773

BDU:2015-08774

CESA-2012_1180

CVE-2011-2896

DSA-2354-1

DSA-2426-1

OPENSUSE-SU-2024:10294-1

RHSA-2011:1635

RHSA-2011_1635

RHSA-2012:0302

RHSA-2012:1180

RHSA-2012:1181

RHSA-2012_0302

RHSA-2012_1180

RHSA-2012_1181

USN-1207-1

USN-1214-1

Affected Products

Alt Linux

Centos

Red Hat

Gimp

Gimp-Debuginfo

Gimp-Devel

Gimp-Devel-Tools

Gimp-Help-Browser

Gimp-Libs

References · 88

• http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065539.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6090 · Security Note
• http://git.gnome.org/browse/gimp/commit/?id=376ad788c1a1c31d40f18494889c383f6909ebfc · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3481 · Security Note
• https://errata.altlinux.org/ALT-PU-2018-1360 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1207-1 · Vendor Advisory
• http://ubuntu.com/usn/USN-1207-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08773 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2011-2896 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-1635.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-2896 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2011:167 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1180.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08774 · Security Note
• https://ubuntu.com/security/CVE-2011-2896 · Vendor Advisory