Package(s):	gimp	CVE #(s):	CVE-2009-1570
Created:	November 13, 2009	Updated:	September 28, 2012
Description:	From the Mandriva advisory: Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.
Alerts:	Gentoo 201209-23 gimp 2012-09-28 CentOS CESA-2011:0837 gimp 2011-06-01 CentOS CESA-2011:0838 gimp 2011-05-31 Red Hat RHSA-2011:0838-01 gimp 2011-05-31 Red Hat RHSA-2011:0837-01 gimp 2011-05-31 Mandriva MDVSA-2009:332-1 gimp 2010-04-28 SuSE SUSE-SR:2010:009 viewvc, krb5, pango, gimp, kdebase3, kde4-kdm 2010-04-14 Ubuntu USN-880-1 gimp 2010-01-07 Slackware SSA:2009-345-01 gimp 2009-12-14 Mandriva MDVSA-2009:296-1 gimp 2009-12-11 Mandriva MDVSA-2009:332 gimp 2009-12-11 Mandriva MDVSA-2009:296 gimp 2009-11-13

---

to post comments