Integer overflow in Gimp

CVE-2006-4519

Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.

Vulnerability class: Integer Overflow

EPSS: 0.056 (92.1th percentile) — read the EPSS interpretation.

Affected products

  • Gimp
  • N/a — versions n/a

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
  • cve@mitre.org (vdb-entry, Broken Link, x_refsource_VUPEN)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory, Broken Link)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
  • cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
  • cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
  • cve@mitre.org (Tool Signature, x_refsource_OVAL, signature, vdb-entry)
  • cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
  • cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
  • cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)