CVE-2009-1570

 

Published at: - 13-11-2009 04:30

Last modified: - 07-02-2022 06:54

Total changes: - 2

Description

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:C/I:C/A:C

 

Verification logic

 

Reference

• 37232-Broken Link
• http://git.gnome.org/cgit/gimp/commit/?h=gimp-2-6&id=df2b0aca2e7cdb95ebfd3454c65aaba0a83e9bbe
• 59930-Broken Link
• ADV-2009-3228-Broken Link, Patch
• http://secunia.com/secunia_research/2009-42/
• https://bugzilla.gnome.org/show_bug.cgi?id=600484
• 37006-Broken Link, Third Party Advisory, VDB Entry
• ADV-2009-3564-Broken Link
• ADV-2010-1021-Broken Link
• SUSE-SR:2010:009-Third Party Advisory
• RHSA-2011:0838-Broken Link
• RHSA-2011:0837-Broken Link
• 50737-Broken Link
• GLSA-201209-23-Third Party Advisory
• gimp-readimage-bo(54254)-Third Party Advisory, VDB Entry
• oval:org.mitre.oval:def:8290-Tool Signature
• 20091112 Secunia Research: Gimp BMP Image Parsing Integer Overflow Vulnerability-Broken Link, Third Party Advisory, VDB Entry

 

Keywords

NVD

 

CVE-2009-1570

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures