CVE-2009-3909

 

Published at: - 19-11-2009 01:30

Last modified: - 07-02-2022 06:53

Total changes: - 2

Description

Integer overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a crafted PSD file that triggers a heap-based buffer overflow.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:C/I:C/A:C

 

Verification logic

 

Reference

• http://secunia.com/secunia_research/2009-43/
• 37348-Broken Link
• http://git.gnome.org/cgit/gimp/commit/?id=0e440cb6d4d6ee029667363d244aff61b154c33c
• http://git.gnome.org/cgit/gimp/commit/?id=9cc8d78ff33b7a36852b74e64b427489cad44d0e
• ADV-2009-3270-Broken Link, Vendor Advisory
• https://bugzilla.gnome.org/show_bug.cgi?id=600741
• 37040-Broken Link, Third Party Advisory, VDB Entry
• 60178-Broken Link
• DSA-1941-Third Party Advisory
• MDVSA-2009:332-Broken Link
• ADV-2010-1021-Broken Link
• SUSE-SR:2010:009-Third Party Advisory
• RHSA-2012:1181-Third Party Advisory
• 50737-Broken Link
• GLSA-201209-23-Third Party Advisory
• 20091117 Secunia Research: Gimp PSD Image Parsing Integer Overflow Vulnerability-Broken Link, Third Party Advisory, VDB Entry

 

Keywords

NVD

 

CVE-2009-3909

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures