Buffer overflow in Gimp

CVE-2006-3404

Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property.

Vulnerability class: Buffer Overflow

EPSS: 0.050 (91.4th percentile) — read the EPSS interpretation.

Affected products

Gimp
N/a — versions n/a

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK, Broken Link)
cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
cve@mitre.org (vendor-advisory, x_refsource_SUNALERT, Broken Link)
cve@mitre.org (vendor-advisory, x_refsource_SUNALERT, Broken Link)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory, Broken Link)
cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory, Broken Link)
cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
cve@mitre.org (x_refsource_CONFIRM, Broken Link)