PT-2012-1071 · Gnu+3 · Gimp+3

Murray Mcallister · Published 2012-08-20 · Updated 2023-02-13 · CVE-2012-3403

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GIMP versions 2.6.9 and earlier GIMP versions 2.8.x and earlier

Description The issue is related to multiple vulnerabilities in the GIMP package, which can lead to a disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. A heap-based buffer overflow in the KiSS CEL file format plug-in allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file.

Recommendations For GIMP versions 2.6.9 and earlier, update to a newer version to mitigate the risk. For GIMP versions 2.8.x and earlier, update to a newer version to mitigate the risk. As a temporary workaround, consider disabling the KiSS CEL file format plug-in until a patch is available.

Exploit

Fix

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2015-06186

BDU:2015-06188

BDU:2015-06189

BDU:2015-06190

BDU:2015-06191

BDU:2015-06192

BDU:2015-08769

BDU:2015-08770

BDU:2015-08771

BDU:2015-08772

BDU:2015-08773

BDU:2015-08774

CESA-2012_1180

CVE-2012-3403

OPENSUSE-SU-2012_1080-1

RHSA-2012:1180

RHSA-2012:1181

RHSA-2012_1180

RHSA-2012_1181

SUSE-SU-2012_1027-1

SUSE-SU-2012_1029-1

Affected Products

Centos

Gimp

Red Hat

Suse

References · 66

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/gimp_script_fu.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3481 · Security Note
• http://ubuntu.com/usn/USN-1559-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08773 · Security Note
• http://rhn.redhat.com/errata/RHSA-2012-1180.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08774 · Security Note
• https://bdu.fstec.ru/vul/2015-08769 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3403 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2012:142 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2896 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2012-3403 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2012-1180.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1181.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08772 · Security Note
• https://bdu.fstec.ru/vul/2015-06191 · Security Note