Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
References
Link | Resource |
---|---|
http://osvdb.org/43453 | Broken Link |
http://www.securityfocus.com/archive/1/470751/100/0/threaded | Broken Link Third Party Advisory VDB Entry |
https://bugzilla.gnome.org/show_bug.cgi?id=778604 | Issue Tracking Third Party Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/34789 | Third Party Advisory VDB Entry |
https://git.gnome.org/browse/gimp/commit/?id=323ecb73f7bf36788fb7066eb2d6678830cd5de7 | Patch Vendor Advisory |
https://www.gimp.org/news/2017/05/11/gimp-2-8-22-released/ | Vendor Advisory |
Configurations
History
07 Feb 2022, 17:28
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:* | |
CWE | NVD-CWE-noinfo | |
References | (CONFIRM) https://git.gnome.org/browse/gimp/commit/?id=323ecb73f7bf36788fb7066eb2d6678830cd5de7 - Patch, Vendor Advisory | |
References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/34789 - Third Party Advisory, VDB Entry | |
References | (OSVDB) http://osvdb.org/43453 - Broken Link | |
References | (CONFIRM) https://bugzilla.gnome.org/show_bug.cgi?id=778604 - Issue Tracking, Third Party Advisory | |
References | (CONFIRM) https://www.gimp.org/news/2017/05/11/gimp-2-8-22-released/ - Vendor Advisory | |
References | (BUGTRAQ) http://www.securityfocus.com/archive/1/470751/100/0/threaded - Broken Link, Third Party Advisory, VDB Entry |
Information
Published : 2007-06-08 00:30
Updated : 2024-02-04 17:13
NVD link : CVE-2007-3126
Mitre link : CVE-2007-3126
CVE.ORG link : CVE-2007-3126
JSON object : View
Products Affected
gimp
- gimp
CWE