CVE-2007-2949

Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.
References
Link Resource
http://issues.foresightlinux.org/browse/FL-457 Broken Link
http://osvdb.org/37804 Broken Link
http://secunia.com/advisories/25677 Broken Link Patch
http://secunia.com/advisories/25949 Broken Link
http://secunia.com/advisories/26044 Broken Link
http://secunia.com/advisories/26132 Broken Link
http://secunia.com/advisories/26215 Broken Link
http://secunia.com/advisories/26384 Broken Link
http://secunia.com/advisories/26575 Broken Link
http://secunia.com/advisories/26939 Broken Link
http://secunia.com/advisories/28114 Broken Link
http://secunia.com/secunia_research/2007-63/advisory/ Broken Link Patch Vendor Advisory
http://security.gentoo.org/glsa/glsa-200707-09.xml Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1 Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201320-1 Broken Link
http://svn.gnome.org/viewcvs/gimp?view=revision&revision=22798 Vendor Advisory
http://www.debian.org/security/2007/dsa-1335 Third Party Advisory
http://www.kb.cert.org/vuls/id/399896 Third Party Advisory US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2007:170 Broken Link
http://www.novell.com/linux/security/advisories/2007_15_sr.html Broken Link
http://www.redhat.com/support/errata/RHSA-2007-0513.html Broken Link
http://www.securityfocus.com/bid/24745 Broken Link Third Party Advisory VDB Entry
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.360191 Third Party Advisory
http://www.ubuntu.com/usn/usn-480-1 Third Party Advisory
http://www.vupen.com/english/advisories/2007/2421 Broken Link
http://www.vupen.com/english/advisories/2007/4241 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/35246 Third Party Advisory VDB Entry
https://issues.rpath.com/browse/RPL-1487 Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11276 Tool Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5772 Tool Signature
Configurations

Configuration 1 (hide)

cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*

History

07 Feb 2022, 17:48

Type Values Removed Values Added
References (BID) http://www.securityfocus.com/bid/24745 - (BID) http://www.securityfocus.com/bid/24745 - Broken Link, Third Party Advisory, VDB Entry
References (SECUNIA) http://secunia.com/advisories/25949 - (SECUNIA) http://secunia.com/advisories/25949 - Broken Link
References (SECUNIA) http://secunia.com/advisories/28114 - (SECUNIA) http://secunia.com/advisories/28114 - Broken Link
References (MISC) http://secunia.com/secunia_research/2007-63/advisory/ - Patch, Vendor Advisory (MISC) http://secunia.com/secunia_research/2007-63/advisory/ - Broken Link, Patch, Vendor Advisory
References (SLACKWARE) http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.360191 - (SLACKWARE) http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.360191 - Third Party Advisory
References (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/35246 - (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/35246 - Third Party Advisory, VDB Entry
References (UBUNTU) http://www.ubuntu.com/usn/usn-480-1 - (UBUNTU) http://www.ubuntu.com/usn/usn-480-1 - Third Party Advisory
References (GENTOO) http://security.gentoo.org/glsa/glsa-200707-09.xml - (GENTOO) http://security.gentoo.org/glsa/glsa-200707-09.xml - Third Party Advisory
References (SUSE) http://www.novell.com/linux/security/advisories/2007_15_sr.html - (SUSE) http://www.novell.com/linux/security/advisories/2007_15_sr.html - Broken Link
References (REDHAT) http://www.redhat.com/support/errata/RHSA-2007-0513.html - (REDHAT) http://www.redhat.com/support/errata/RHSA-2007-0513.html - Broken Link
References (SUNALERT) http://sunsolve.sun.com/search/document.do?assetkey=1-66-201320-1 - (SUNALERT) http://sunsolve.sun.com/search/document.do?assetkey=1-66-201320-1 - Broken Link
References (SECUNIA) http://secunia.com/advisories/26384 - (SECUNIA) http://secunia.com/advisories/26384 - Broken Link
References (SECUNIA) http://secunia.com/advisories/26939 - (SECUNIA) http://secunia.com/advisories/26939 - Broken Link
References (VUPEN) http://www.vupen.com/english/advisories/2007/2421 - (VUPEN) http://www.vupen.com/english/advisories/2007/2421 - Broken Link
References (CONFIRM) https://issues.rpath.com/browse/RPL-1487 - (CONFIRM) https://issues.rpath.com/browse/RPL-1487 - Broken Link
References (CONFIRM) http://svn.gnome.org/viewcvs/gimp?view=revision&revision=22798 - (CONFIRM) http://svn.gnome.org/viewcvs/gimp?view=revision&revision=22798 - Vendor Advisory
References (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5772 - (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5772 - Tool Signature
References (MANDRIVA) http://www.mandriva.com/security/advisories?name=MDKSA-2007:170 - (MANDRIVA) http://www.mandriva.com/security/advisories?name=MDKSA-2007:170 - Broken Link
References (CERT-VN) http://www.kb.cert.org/vuls/id/399896 - US Government Resource (CERT-VN) http://www.kb.cert.org/vuls/id/399896 - Third Party Advisory, US Government Resource
References (CONFIRM) http://issues.foresightlinux.org/browse/FL-457 - (CONFIRM) http://issues.foresightlinux.org/browse/FL-457 - Broken Link
References (SECUNIA) http://secunia.com/advisories/26215 - (SECUNIA) http://secunia.com/advisories/26215 - Broken Link
References (OSVDB) http://osvdb.org/37804 - (OSVDB) http://osvdb.org/37804 - Broken Link
References (SECUNIA) http://secunia.com/advisories/26575 - (SECUNIA) http://secunia.com/advisories/26575 - Broken Link
References (SECUNIA) http://secunia.com/advisories/25677 - Patch, Vendor Advisory (SECUNIA) http://secunia.com/advisories/25677 - Broken Link, Patch
References (VUPEN) http://www.vupen.com/english/advisories/2007/4241 - (VUPEN) http://www.vupen.com/english/advisories/2007/4241 - Broken Link
References (SUNALERT) http://sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1 - (SUNALERT) http://sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1 - Broken Link
References (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11276 - (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11276 - Tool Signature
References (SECUNIA) http://secunia.com/advisories/26044 - (SECUNIA) http://secunia.com/advisories/26044 - Broken Link
References (SECUNIA) http://secunia.com/advisories/26132 - (SECUNIA) http://secunia.com/advisories/26132 - Broken Link
References (DEBIAN) http://www.debian.org/security/2007/dsa-1335 - (DEBIAN) http://www.debian.org/security/2007/dsa-1335 - Third Party Advisory
CWE NVD-CWE-Other CWE-190
CPE cpe:2.3:a:the_gimp_team:gimp:2.2.12:*:*:*:*:*:*:*
cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:sparc:*:*:*:*:*
cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:powerpc:*:*:*:*:*
cpe:2.3:a:the_gimp_team:gimp:1.2.5:*:*:*:*:*:*:*
cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:i386:*:*:*:*:*
cpe:2.3:a:the_gimp_team:gimp:2.2.15:*:*:*:*:*:*:*
cpe:2.3:a:the_gimp_team:gimp:2.2.14:*:*:*:*:*:*:*
cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:amd64:*:*:*:*:*
cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:powerpc:*:*:*:*:*
cpe:2.3:a:the_gimp_team:gimp:2.2.10:*:*:*:*:*:*:*
cpe:2.3:a:the_gimp_team:gimp:2.2.6:*:*:*:*:*:*:*
cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:i386:*:*:*:*:*
cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:amd64:*:*:*:*:*
cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:sparc:*:*:*:*:*
cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:sparc:*:*:*:*:*
cpe:2.3:a:the_gimp_team:gimp:2.2.8:*:*:*:*:*:*:*
cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:amd64:*:*:*:*:*
cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:i386:*:*:*:*:*
cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:powerpc:*:*:*:*:*
cpe:2.3:a:the_gimp_team:gimp:2.2.11:*:*:*:*:*:*:*
cpe:2.3:a:the_gimp_team:gimp:2.2.4:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:*

Information

Published : 2007-07-04 15:30

Updated : 2024-02-04 17:13


NVD link : CVE-2007-2949

Mitre link : CVE-2007-2949

CVE.ORG link : CVE-2007-2949


JSON object : View

Products Affected

canonical

  • ubuntu_linux

gimp

  • gimp
CWE
CWE-190

Integer Overflow or Wraparound