Integer overflow in Gimp

CVE-2009-3909

Integer overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a crafted PSD file that triggers a heap-based buffer overflow.

Vulnerability class: Integer Overflow

EPSS: 0.087 (94.6th percentile) — read the EPSS interpretation.

Affected products

Gimp — versions 2.6.7
N/a — versions n/a

Weakness classification (CWE)

CWE-190 — Integer Overflow or Wraparound

References

PSIRT-CNA@flexerasoftware.com (x_refsource_OSVDB, vdb-entry, Broken Link)
PSIRT-CNA@flexerasoftware.com (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
PSIRT-CNA@flexerasoftware.com (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
PSIRT-CNA@flexerasoftware.com (vdb-entry, Broken Link, x_refsource_VUPEN, Vendor Advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_MISC, Broken Link)
PSIRT-CNA@flexerasoftware.com (Third Party Advisory, x_refsource_MISC, Issue Tracking)
PSIRT-CNA@flexerasoftware.com (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory, Broken Link)