|
|
| |
|
| |
gimp: code execution
| Package(s): | gimp |
CVE #(s): | CVE-2012-3402
CVE-2009-3909
|
| Created: | August 20, 2012 |
Updated: | September 28, 2012 |
| Description: |
From the Red Hat advisory:
Multiple integer overflow flaws, leading to heap-based buffer overflows,
were found in the GIMP's Adobe Photoshop (PSD) image file plug-in. An
attacker could create a specially-crafted PSD image file that, when opened,
could cause the PSD plug-in to crash or, potentially, execute arbitrary
code with the privileges of the user running the GIMP. (CVE-2009-3909,
CVE-2012-3402) |
| Alerts: |
|
( Log in to post comments)
|
|
|