Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.
References
Configurations
History
07 Feb 2022, 17:48
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Canonical ubuntu Linux
Canonical Gimp Gimp gimp |
|
| CWE | CWE-190 | |
| CPE | cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:sparc:*:*:*:*:* cpe:2.3:a:the_gimp_team:gimp:2.2.6:*:*:*:*:*:*:* cpe:2.3:a:the_gimp_team:gimp:2.2.11:*:*:*:*:*:*:* cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:i386:*:*:*:*:* cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:powerpc:*:*:*:*:* cpe:2.3:a:the_gimp_team:gimp:2.2.15:*:*:*:*:*:*:* cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:amd64:*:*:*:*:* cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:amd64:*:*:*:*:* cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:sparc:*:*:*:*:* cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:sparc:*:*:*:*:* cpe:2.3:a:the_gimp_team:gimp:1.2.5:*:*:*:*:*:*:* cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:powerpc:*:*:*:*:* cpe:2.3:a:the_gimp_team:gimp:2.2.4:*:*:*:*:*:*:* cpe:2.3:a:the_gimp_team:gimp:2.2.12:*:*:*:*:*:*:* cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:i386:*:*:*:*:* cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:amd64:*:*:*:*:* cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:powerpc:*:*:*:*:* cpe:2.3:a:the_gimp_team:gimp:2.2.14:*:*:*:*:*:*:* cpe:2.3:a:the_gimp_team:gimp:2.2.10:*:*:*:*:*:*:* cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:i386:*:*:*:*:* |
cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:* |
| References | (VUPEN) http://www.vupen.com/english/advisories/2007/2421 - Broken Link | |
| References | (SUNALERT) http://sunsolve.sun.com/search/document.do?assetkey=1-66-201320-1 - Broken Link | |
| References | (CONFIRM) https://issues.rpath.com/browse/RPL-1487 - Broken Link | |
| References | (CERT-VN) http://www.kb.cert.org/vuls/id/399896 - Third Party Advisory, US Government Resource | |
| References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/35246 - Third Party Advisory, VDB Entry | |
| References | (MANDRIVA) http://www.mandriva.com/security/advisories?name=MDKSA-2007:170 - Broken Link | |
| References | (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5772 - Tool Signature | |
| References | (MISC) http://secunia.com/secunia_research/2007-63/advisory/ - Broken Link, Patch, Vendor Advisory | |
| References | (DEBIAN) http://www.debian.org/security/2007/dsa-1335 - Third Party Advisory | |
| References | (SECUNIA) http://secunia.com/advisories/28114 - Broken Link | |
| References | (SUNALERT) http://sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1 - Broken Link | |
| References | (VUPEN) http://www.vupen.com/english/advisories/2007/4241 - Broken Link | |
| References | (OSVDB) http://osvdb.org/37804 - Broken Link | |
| References | (CONFIRM) http://svn.gnome.org/viewcvs/gimp?view=revision&revision=22798 - Vendor Advisory | |
| References | (BID) http://www.securityfocus.com/bid/24745 - Broken Link, Third Party Advisory, VDB Entry | |
| References | (SECUNIA) http://secunia.com/advisories/25949 - Broken Link | |
| References | (UBUNTU) http://www.ubuntu.com/usn/usn-480-1 - Third Party Advisory | |
| References | (SECUNIA) http://secunia.com/advisories/26132 - Broken Link | |
| References | (SLACKWARE) http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.360191 - Third Party Advisory | |
| References | (SECUNIA) http://secunia.com/advisories/26215 - Broken Link | |
| References | (GENTOO) http://security.gentoo.org/glsa/glsa-200707-09.xml - Third Party Advisory | |
| References | (SECUNIA) http://secunia.com/advisories/25677 - Broken Link, Patch | |
| References | (CONFIRM) http://issues.foresightlinux.org/browse/FL-457 - Broken Link | |
| References | (SUSE) http://www.novell.com/linux/security/advisories/2007_15_sr.html - Broken Link | |
| References | (REDHAT) http://www.redhat.com/support/errata/RHSA-2007-0513.html - Broken Link | |
| References | (SECUNIA) http://secunia.com/advisories/26044 - Broken Link | |
| References | (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11276 - Tool Signature | |
| References | (SECUNIA) http://secunia.com/advisories/26575 - Broken Link | |
| References | (SECUNIA) http://secunia.com/advisories/26939 - Broken Link | |
| References | (SECUNIA) http://secunia.com/advisories/26384 - Broken Link |
Information
Published : 2007-07-04 15:30
Updated : 2023-12-10 10:40
NVD link : CVE-2007-2949
Mitre link : CVE-2007-2949
CVE.ORG link : CVE-2007-2949
JSON object : View
Products Affected
canonical
- ubuntu_linux
gimp
- gimp
CWE
CWE-190
Integer Overflow or Wraparound