PT-2011-1599 · Gnu+1 · Gimp+1

Huzaifa S. Sidhpurwala · Published 2011-01-07 · Updated 2024-06-15 · CVE-2010-4540

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GIMP version 2.6.11

Description The issue is related to a stack-based buffer overflow in the load preset response function, which is part of the "LIGHTING EFFECTS > LIGHT" plugin. This can be triggered by a long Position field in a plugin configuration file, potentially allowing user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code. It is noted that obtaining a GIMP plugin configuration file from an untrusted source separate from the plugin distribution may be uncommon.

Recommendations For GIMP version 2.6.11, consider avoiding the use of plugin configuration files from untrusted sources to minimize the risk of exploitation. As a temporary workaround, restrict the use of the "LIGHTING EFFECTS > LIGHT" plugin until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2010-4540

DSA-2426-1

OPENSUSE-SU-2024:10294-1

RHSA-2011:0838

RHSA-2011:0839

RHSA-2011_0838

RHSA-2011_0839

Affected Products

Gimp

Red Hat

References · 39

• 🔥 http://openwall.com/lists/oss-security/2011/01/03/2 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=666793 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2011/01/04/7 · Exploit
• 🔥 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608497 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2010-4540 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2011:103 · Vendor Advisory
• http://debian.org/security/2012/dsa-2426 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-4540 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-0839.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-4540 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-0839.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-4540 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10294-1 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-0838.html · Vendor Advisory