Gimp

Gimp

81 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2012-3403

  • EPSS 4.95%
  • Veröffentlicht 25.08.2012 10:29:49
  • Zuletzt bearbeitet 16.06.2026 23:43:09

Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file, which triggers an "invalid free."

4.3

CVE-2012-3236

Exploit
  • EPSS 10.75%
  • Veröffentlicht 12.07.2012 21:55:06
  • Zuletzt bearbeitet 16.06.2026 23:42:50

fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed XTENSION header of a .fit file, as demonstrated using a long string.

7.5

CVE-2012-2763

Exploit
  • EPSS 81.72%
  • Veröffentlicht 12.07.2012 19:55:06
  • Zuletzt bearbeitet 16.06.2026 23:42:03

Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long string in a command to the script-fu server.

5.1

CVE-2011-2896

  • EPSS 12.71%
  • Veröffentlicht 19.08.2011 17:55:03
  • Zuletzt bearbeitet 16.06.2026 23:32:12

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in...

7.5

CVE-2011-1782

  • EPSS 3.43%
  • Veröffentlicht 27.07.2011 02:42:27
  • Zuletzt bearbeitet 16.06.2026 23:30:01

Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RL...

6.8

CVE-2011-1178

  • EPSS 5.33%
  • Veröffentlicht 06.06.2011 19:55:01
  • Zuletzt bearbeitet 16.06.2026 23:28:52

Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code vi...

7.5

CVE-2010-4543

Exploit
  • EPSS 16.27%
  • Veröffentlicht 07.01.2011 20:00:05
  • Zuletzt bearbeitet 16.06.2026 23:25:01

Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RL...

6.8

CVE-2010-4542

Exploit
  • EPSS 5.57%
  • Veröffentlicht 07.01.2011 20:00:05
  • Zuletzt bearbeitet 16.06.2026 23:25:01

Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in plug-ins/gfig/gfig-style.c in the GFIG plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitr...

9.3

CVE-2010-4541

  • EPSS 6.81%
  • Veröffentlicht 07.01.2011 20:00:05
  • Zuletzt bearbeitet 16.06.2026 23:25:01

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary ...

6.8

CVE-2010-4540

Exploit
  • EPSS 6.07%
  • Veröffentlicht 07.01.2011 20:00:04
  • Zuletzt bearbeitet 16.06.2026 23:25:01

Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or poss...