Buffer overflow in Gimp

CVE-2012-3403

Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file, which triggers an "invalid free."

Vulnerability class: Buffer Overflow

EPSS: 0.050 (91.3th percentile) — read the EPSS interpretation.

Affected products

  • Gimp
  • N/a — versions n/a

Weakness classification (CWE)

References