CVE-2006-4519

GIMP multiple image loader integer overflows

Published Jul 10, 2007 CVSS 2.0 · 6.8 Medium EPSS 5.6% KEV · Not listed
Description
Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1335-1 New gimp packages fix arbitrary code execution
EUVD EUVD EUVD-2006-4507 Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.
Ubuntu USN Ubuntu USN USN-494-1 Gimp vulnerability
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 7:14 PM
Reserved
Aug 31, 2006, 12:00 AM
Status
Modified
Published
Jul 10, 2007, 6:30 PM
Modified
Jun 16, 2026, 10:29 PM
Severity
Moderate
Public date
Jul 9, 2007, 12:00 AM