Gimp

Gimp

47 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2009-0581

Exploit
  • EPSS 2.12%
  • Published 23.03.2009 14:19:12
  • Last modified 09.04.2025 00:30:58

Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service (memory consumption and application crash) via a crafted image file.

6.8

CVE-2006-4519

  • EPSS 7.39%
  • Published 10.07.2007 18:30:00
  • Last modified 09.04.2025 00:30:58

Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.

6.8

CVE-2007-2949

  • EPSS 33.94%
  • Published 04.07.2007 15:30:00
  • Last modified 09.04.2025 00:30:58

Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.

5

CVE-2007-3126

  • EPSS 0.86%
  • Published 08.06.2007 00:30:00
  • Last modified 09.04.2025 00:30:58

Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.

6.8

CVE-2007-2356

Exploit
  • EPSS 32.46%
  • Published 30.04.2007 22:19:00
  • Last modified 09.04.2025 00:30:58

Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.

5.1

CVE-2006-3404

  • EPSS 1.91%
  • Published 06.07.2006 20:05:00
  • Last modified 03.04.2025 01:03:51

Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VE...

5

CVE-2005-0654

Exploit
  • EPSS 0.7%
  • Published 02.05.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) via the image descriptor (1) height or (2) width fields set to zero.