9.3
CVE-2009-1570
- EPSS 8.04%
- Veröffentlicht 13.11.2009 15:30:00
- Zuletzt bearbeitet 16.06.2026 23:07:32
- Quelle PSIRT-CNA@flexerasoftware.com
- CVE-Watchlists
- Unerledigt
LoginInteger overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 8.04% | 0.94 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
CWE-190 Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
http://git.gnome.org/cgit/gimp/commit/?h=gimp-2-6&id=df2b0aca2e7cdb95ebfd3454c65aaba0a83e9bbe
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html
http://secunia.com/advisories/37232
http://secunia.com/advisories/50737
http://secunia.com/secunia_research/2009-42/
http://security.gentoo.org/glsa/glsa-201209-23.xml
http://www.osvdb.org/59930
http://www.redhat.com/support/errata/RHSA-2011-0837.html
http://www.redhat.com/support/errata/RHSA-2011-0838.html
http://www.securityfocus.com/archive/1/507813/100/0/threaded
http://www.securityfocus.com/bid/37006
http://www.vupen.com/english/advisories/2009/3228
http://www.vupen.com/english/advisories/2009/3564
http://www.vupen.com/english/advisories/2010/1021
https://bugzilla.gnome.org/show_bug.cgi?id=600484
https://exchange.xforce.ibmcloud.com/vulnerabilities/54254
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8290