A buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp 2.2.x allows user-complicit attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property.

Updated packages have been patched to correct this issue.

GNOME 2.6.0：GNOMEデスクトップのパッチ。
Sun によるこのパッチの最終更新日：2012年11月10日

GNOME 2.6.0_x86：GNOMEデスクトップのパッチ。
Sun によるこのパッチの最終更新日：2012年11月10日

New gimp packages are available for Slackware 10.2 and -current to fix a possible security issue.

Henning Makholm discovered that gimp did not sufficiently validate the 'num_axes' parameter in XCF files. By tricking a user into opening a specially crafted XCF file with Gimp, an attacker could exploit this to execute arbitrary code with the user's privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

GNOME 2.6.0：GNOME 桌面修补程序。Sun 上次更新此修补程序的日期：2012 年 11 月 10 日

GNOME 2.6.0_x86：GNOME 桌面修补程序。Sun 上次更新此修补程序的日期：2012 年 11 月 10 日

GNOME 2.6.0：GNOME Desktop 修補程式。上次由 Sun 更新此修補程式的日期：2012 年 11 月 10 日

Henning Makholm discovered a buffer overflow in the XCF loading code of Gimp, an image editing program. Opening a specially crafted XCF image might cause the application to execute arbitrary code.

A buffer overflow was fixed in the xcf loader in GIMP that allows user-complicit attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property. (CVE-2006-3404)

GNOME 2.6.0_x86：GNOME Desktop 修補程式。上次由 Sun 更新此修補程式的日期：2012 年 11 月 10 日

GNOME 2.6.0: GNOME Desktop Patch.
Date this patch was last updated by Sun : Nov/10/12

GNOME 2.6.0_x86: GNOME Desktop Patch.
Date this patch was last updated by Sun : Nov/10/12

Updated gimp packages that fix a security issue are now available for Red Hat Enterprise Linux 4.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The GIMP (GNU Image Manipulation Program) is an image composition and editing program.

Henning Makholm discovered a buffer overflow bug in The GIMP XCF file loader. An attacker could create a carefully crafted image that could execute arbitrary code if opened by a victim. (CVE-2006-3404)

Please note that this issue did not affect the gimp packages in Red Hat Enterprise Linux 2.1, or 3.

Users of The GIMP should update to these erratum packages which contain a backported fix to correct this issue.

The remote host is affected by the vulnerability described in GLSA-200607-08 (GIMP: Buffer overflow)

    Henning Makholm discovered that the 'xcf_load_vector()' function is     vulnerable to a buffer overflow when loading a XCF file with a large     'num_axes' value.
  Impact :

    An attacker could exploit this issue to execute arbitrary code by     enticing a user to open a specially crafted XCF file.
  Workaround :

    There is no known workaround at this time.

ID	名稱	產品	系列	已發布	已更新	嚴重性
23878	Mandrake Linux Security Advisory : gimp (MDKSA-2006:127)	Nessus	Mandriva Local Security Checks	2006/12/16	2021/1/6	medium
107378	Solaris 10（sparc）: 122212-46	Nessus	Solaris Local Security Checks	2018/3/12	2021/1/14	medium
107880	Solaris 10（x86）： 122213-46	Nessus	Solaris Local Security Checks	2018/3/12	2021/1/14	medium
22100	Slackware 10.2 / current : gimp (SSA:2006-207-03)	Nessus	Slackware Local Security Checks	2006/7/28	2021/1/14	medium
27887	Ubuntu 5.04 / 5.10 / 6.06 LTS : gimp vulnerability (USN-312-1)	Nessus	Ubuntu Local Security Checks	2007/11/10	2021/1/19	medium
107378	Solaris 10 (sparc)：122212-46	Nessus	Solaris Local Security Checks	2018/3/12	2021/1/14	medium
107880	Solaris 10 (x86)：122213-46	Nessus	Solaris Local Security Checks	2018/3/12	2021/1/14	medium
107378	Solaris 10 (sparc)：122212-46	Nessus	Solaris Local Security Checks	2018/3/12	2021/1/14	medium
22658	Debian DSA-1116-1 : gimp - buffer overflow	Nessus	Debian Local Security Checks	2006/10/14	2021/1/4	medium
29441	SuSE 10 Security Update : gimp (ZYPP Patch Number 1920)	Nessus	SuSE Local Security Checks	2007/12/13	2021/1/14	medium
107880	Solaris 10 (x86)：122213-46	Nessus	Solaris Local Security Checks	2018/3/12	2021/1/14	medium
107378	Solaris 10 (sparc) : 122212-46	Nessus	Solaris Local Security Checks	2018/3/12	2021/1/14	medium
27234	openSUSE 10 Security Update : gimp (gimp-1921)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	medium
27238	openSUSE 10 Security Update : gimp-unstable (gimp-unstable-1919)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	medium
107880	Solaris 10 (x86) : 122213-46	Nessus	Solaris Local Security Checks	2018/3/12	2021/1/14	medium
22067	CentOS 4 : gimp (CESA-2006:0598)	Nessus	CentOS Local Security Checks	2006/7/19	2021/1/4	medium
22071	RHEL 4 : gimp (RHSA-2006:0598)	Nessus	Red Hat Local Security Checks	2006/7/19	2021/1/14	medium
22106	GLSA-200607-08 : GIMP: Buffer overflow	Nessus	Gentoo Local Security Checks	2006/7/28	2021/1/6	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium