|
|
| |
|
| |
gimp: multiple vulnerabilities
| Package(s): | gimp |
CVE #(s): | CVE-2012-2763
CVE-2012-3236
|
| Created: | September 4, 2012 |
Updated: | November 9, 2012 |
| Description: |
From the
Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long string in a command to the script-fu server. (CVE-2012-2763)
fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed XTENSION header of a .fit file, as demonstrated using a long string. (CVE-2012-3236) |
| Alerts: |
|
( Log in to post comments)
|
|
|