gimp Vulnerability Advisory Catalog

Total 80 security vulnerabilities recorded for gimp software and firmware.

← Back to All Vendors
Component: gimp

In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c....

📅 2017-12-20
CVSS 7.8 Dossier →
Component: gimp

In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' character after the version string....

📅 2017-12-20
CVSS 5.5 Dossier →
Component: gimp

In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c....

📅 2017-12-20
CVSS 7.8 Dossier →
Component: gimp

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-p...

📅 2017-12-20
CVSS 7.8 Dossier →
Component: gimp

In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c....

📅 2017-12-20
CVSS 7.8 Dossier →
Component: gimp

In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of...

📅 2017-12-20
CVSS 7.8 Dossier →
Component: gimp

Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (progra...

📅 2016-07-12
CVSS 7.8 Dossier →
CVE-2013-1978 UNKNOWN
Component: gimp

Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote atta...

📅 2013-12-12
CVSS 6.8 Dossier →
CVE-2013-1913 UNKNOWN
Component: gimp

Integer overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.2...

📅 2013-12-12
CVSS 6.8 Dossier →
CVE-2012-5576 UNKNOWN
Component: gimp

Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of servi...

📅 2012-12-18
CVSS 7.5 Dossier →
CVE-2012-4245 UNKNOWN
Component: gimp

The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via the python-fu...

📅 2012-08-31
CVSS 6.8 Dossier →
CVE-2012-3481 UNKNOWN
Component: gimp

Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allows remote ...

📅 2012-08-25
CVSS 6.8 Dossier →
CVE-2012-3403 UNKNOWN
Component: gimp

Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and poss...

📅 2012-08-25
CVSS 6.8 Dossier →
CVE-2012-3402 UNKNOWN
Component: gimp

Integer overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP 2.2.13 and earlier allows remote attackers to cause a denial of se...

📅 2012-08-25
CVSS 6.8 Dossier →
CVE-2012-3236 UNKNOWN
Component: gimp

fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed X...

📅 2012-07-12
CVSS 4.3 Dossier →
CVE-2012-2763 UNKNOWN
Component: gimp

Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote ...

📅 2012-07-12
CVSS 7.5 Dossier →
CVE-2011-1782 UNKNOWN
Component: gimp

Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers t...

📅 2011-07-27
CVSS 7.5 Dossier →
CVE-2011-1178 UNKNOWN
Component: gimp

Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow rem...

📅 2011-06-06
CVSS 6.8 Dossier →
CVE-2010-4543 UNKNOWN
Component: gimp

Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers t...

📅 2011-01-07
CVSS 7.5 Dossier →
CVE-2010-4542 UNKNOWN
Component: gimp

Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in plug-ins/gfig/gfig-style.c in the GFIG plugin in GIMP 2.6.11 allows user-a...

📅 2011-01-07
CVSS 6.8 Dossier →
CVE-2010-4541 UNKNOWN
Component: gimp

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assis...

📅 2011-01-07
CVSS 9.3 Dossier →
CVE-2010-4540 UNKNOWN
Component: gimp

Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2...

📅 2011-01-07
CVSS 6.8 Dossier →
CVE-2009-3909 UNKNOWN
Component: gimp

Integer overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary cod...

📅 2009-11-19
CVSS 9.3 Dossier →
CVE-2009-1570 UNKNOWN
Component: gimp

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a ...

📅 2009-11-13
CVSS 9.3 Dossier →
Page 3 of 4 (80 Total Records)