GIMP Multiple File Plugins Remote Stack Buffer Overflow Vulnerabilities

Bugtraq ID:	45647
Class:	Input Validation Error
CVE:	CVE-2010-4540 CVE-2010-4541 CVE-2010-4542 CVE-2010-4543
Remote:	Yes
Local:	No
Published:	Dec 31 2010 12:00AM
Updated:	Apr 13 2015 09:36PM
Credit:	non customers
Vulnerable:	Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 ARM Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Sun Solaris 11 Express Sun Solaris 10_x86 Sun Solaris 10_sparc Redhat Enterprise Linux WS 4 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux Desktop version 4 Redhat Enterprise Linux 5 Server Pardus Linux 2011 0 Pardus Linux 2009 0 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 GIMP GIMP 2.6.7 GIMP GIMP 2.6.6 GIMP GIMP 2.4.6 GIMP GIMP 2.3.14 GIMP GIMP 2.3.10 GIMP GIMP 2.3.9 GIMP GIMP 2.2.17 GIMP GIMP 2.2.16 GIMP GIMP 2.2.15 GIMP GIMP 2.2.14 GIMP GIMP 2.2.12 GIMP GIMP 2.2.11 GIMP GIMP 2.2.8 GIMP GIMP 2.2.6 GIMP GIMP 2.2.4 GIMP GIMP 2.6.11 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Avaya Interactive Response 4.0 Avaya Aura System Manager 6.2 Avaya Aura System Manager 6.1.1 Avaya Aura System Manager 6.1
Not Vulnerable:	Avaya Aura System Manager 6.3

GIMP Multiple File Plugins Remote Stack Buffer Overflow Vulnerabilities

GIMP is prone to multiple remote stack-based buffer-overflow vulnerabilities because it fails to perform adequate checks on user-supplied input.

Successfully exploiting these issues may allow remote attackers to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

GIMP 2.6.11 is vulnerable; other versions may also be affected.

GIMP Multiple File Plugins Remote Stack Buffer Overflow Vulnerabilities

The following proof-of-concept is available:

• /data/vulnerabilities/exploits/45647.cob

GIMP Multiple File Plugins Remote Stack Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu gimp-data_2.6.7-1ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.6.7-1ub untu1.2_all.deb


• Ubuntu gimp-dbg_2.6.7-1ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-dbg_2.6.7-1ubuntu1.2_spa rc.deb


• Ubuntu gimp_2.6.7-1ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp_2.6.7-1ubuntu1.2_sparc.d eb


• Ubuntu libgimp2.0-dev_2.6.7-1ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0-dev_2.6.7-1ubuntu1 .2_sparc.deb


• Ubuntu libgimp2.0-doc_2.6.7-1ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.6. 7-1ubuntu1.2_all.deb


• Ubuntu libgimp2.0_2.6.7-1ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0_2.6.7-1ubuntu1.2_s parc.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu gimp-data_2.4.5-1ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.4.5-1ub untu2.3_all.deb


• Ubuntu gimp-dbg_2.4.5-1ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-dbg_2.4.5-1ubuntu2.3_pow erpc.deb


• Ubuntu gimp-gnomevfs_2.4.5-1ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-gnomevfs_2.4.5-1ubuntu2. 3_powerpc.deb


• Ubuntu gimp-libcurl_2.4.5-1ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/universe/g/gimp/gimp-libcurl_2.4.5-1ubunt u2.3_powerpc.deb


• Ubuntu gimp-python_2.4.5-1ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-python_2.4.5-1ubuntu2.3_ powerpc.deb


• Ubuntu gimp_2.4.5-1ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp_2.4.5-1ubuntu2.3_powerpc .deb


• Ubuntu libgimp2.0-dev_2.4.5-1ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0-dev_2.4.5-1ubuntu2 .3_powerpc.deb


• Ubuntu libgimp2.0-doc_2.4.5-1ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.4. 5-1ubuntu2.3_all.deb


• Ubuntu libgimp2.0_2.4.5-1ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0_2.4.5-1ubuntu2.3_p owerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu gimp-data_2.4.5-1ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.4.5-1ub untu2.3_all.deb


• Ubuntu gimp-dbg_2.4.5-1ubuntu2.3_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-dbg_2.4.5-1ubuntu2.3_spa rc.deb


• Ubuntu gimp-gnomevfs_2.4.5-1ubuntu2.3_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-gnomevfs_2.4.5-1ubuntu2. 3_sparc.deb


• Ubuntu gimp-libcurl_2.4.5-1ubuntu2.3_sparc.deb
  http://ports.ubuntu.com/pool/universe/g/gimp/gimp-libcurl_2.4.5-1ubunt u2.3_sparc.deb


• Ubuntu gimp-python_2.4.5-1ubuntu2.3_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-python_2.4.5-1ubuntu2.3_ sparc.deb


• Ubuntu gimp_2.4.5-1ubuntu2.3_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp_2.4.5-1ubuntu2.3_sparc.d eb


• Ubuntu libgimp2.0-dev_2.4.5-1ubuntu2.3_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0-dev_2.4.5-1ubuntu2 .3_sparc.deb


• Ubuntu libgimp2.0-doc_2.4.5-1ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.4. 5-1ubuntu2.3_all.deb


• Ubuntu libgimp2.0_2.4.5-1ubuntu2.3_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0_2.4.5-1ubuntu2.3_s parc.deb

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu gimp-data_2.6.7-1ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.6.7-1ub untu1.2_all.deb


• Ubuntu gimp-dbg_2.6.7-1ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-dbg_2.6.7-1ubuntu1.2_pow erpc.deb


• Ubuntu gimp_2.6.7-1ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp_2.6.7-1ubuntu1.2_powerpc .deb


• Ubuntu libgimp2.0-dev_2.6.7-1ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0-dev_2.6.7-1ubuntu1 .2_powerpc.deb


• Ubuntu libgimp2.0-doc_2.6.7-1ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.6. 7-1ubuntu1.2_all.deb


• Ubuntu libgimp2.0_2.6.7-1ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0_2.6.7-1ubuntu1.2_p owerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu gimp-data_2.4.5-1ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.4.5-1ub untu2.3_all.deb


• Ubuntu gimp-dbg_2.4.5-1ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-dbg_2.4.5-1ubu ntu2.3_amd64.deb


• Ubuntu gimp-gnomevfs_2.4.5-1ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-gnomevfs_2.4.5 -1ubuntu2.3_amd64.deb


• Ubuntu gimp-libcurl_2.4.5-1ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gimp/gimp-libcurl_2. 4.5-1ubuntu2.3_amd64.deb


• Ubuntu gimp-python_2.4.5-1ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-python_2.4.5-1 ubuntu2.3_amd64.deb


• Ubuntu gimp_2.4.5-1ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp_2.4.5-1ubuntu2 .3_amd64.deb


• Ubuntu libgimp2.0-dev_2.4.5-1ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-dev_2.4. 5-1ubuntu2.3_amd64.deb


• Ubuntu libgimp2.0-doc_2.4.5-1ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.4. 5-1ubuntu2.3_all.deb


• Ubuntu libgimp2.0_2.4.5-1ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0_2.4.5-1u buntu2.3_amd64.deb

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu gimp-data_2.6.7-1ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.6.7-1ub untu1.2_all.deb


• Ubuntu gimp-dbg_2.6.7-1ubuntu1.2_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-dbg_2.6.7-1ubuntu1.2_lpi a.deb


• Ubuntu gimp_2.6.7-1ubuntu1.2_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp_2.6.7-1ubuntu1.2_lpia.de b


• Ubuntu libgimp2.0-dev_2.6.7-1ubuntu1.2_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0-dev_2.6.7-1ubuntu1 .2_lpia.deb


• Ubuntu libgimp2.0-doc_2.6.7-1ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.6. 7-1ubuntu1.2_all.deb


• Ubuntu libgimp2.0_2.6.7-1ubuntu1.2_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0_2.6.7-1ubuntu1.2_l pia.deb

Mandriva Linux Mandrake 2010.1 x86_64

• Mandriva gimp-2.6.8-3.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva gimp-python-2.6.8-3.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gimp2.0-devel-2.6.8-3.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gimp2.0_0-2.6.8-3.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 10.10 amd64

• Ubuntu gimp-data_2.6.10-1ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.6.10-1u buntu3.2_all.deb


• Ubuntu gimp-dbg_2.6.10-1ubuntu3.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-dbg_2.6.10-1ub untu3.2_amd64.deb


• Ubuntu gimp_2.6.10-1ubuntu3.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp_2.6.10-1ubuntu 3.2_amd64.deb


• Ubuntu libgimp2.0-dev_2.6.10-1ubuntu3.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-dev_2.6. 10-1ubuntu3.2_amd64.deb


• Ubuntu libgimp2.0-doc_2.6.10-1ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.6. 10-1ubuntu3.2_all.deb


• Ubuntu libgimp2.0_2.6.10-1ubuntu3.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0_2.6.10-1 ubuntu3.2_amd64.deb

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu gimp-data_2.6.8-2ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.6.8-2ub untu1.2_all.deb


• Ubuntu gimp-dbg_2.6.8-2ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-dbg_2.6.8-2ubuntu1.2_pow erpc.deb


• Ubuntu gimp_2.6.8-2ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp_2.6.8-2ubuntu1.2_powerpc .deb


• Ubuntu libgimp2.0-dev_2.6.8-2ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0-dev_2.6.8-2ubuntu1 .2_powerpc.deb


• Ubuntu libgimp2.0-doc_2.6.8-2ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.6. 8-2ubuntu1.2_all.deb


• Ubuntu libgimp2.0_2.6.8-2ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0_2.6.8-2ubuntu1.2_p owerpc.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu gimp-data_2.6.7-1ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.6.7-1ub untu1.2_all.deb


• Ubuntu gimp-dbg_2.6.7-1ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-dbg_2.6.7-1ubu ntu1.2_i386.deb


• Ubuntu gimp_2.6.7-1ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp_2.6.7-1ubuntu1 .2_i386.deb


• Ubuntu libgimp2.0-dev_2.6.7-1ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-dev_2.6. 7-1ubuntu1.2_i386.deb


• Ubuntu libgimp2.0-doc_2.6.7-1ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.6. 7-1ubuntu1.2_all.deb


• Ubuntu libgimp2.0_2.6.7-1ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0_2.6.7-1u buntu1.2_i386.deb

Ubuntu Ubuntu Linux 10.04 amd64

• Ubuntu gimp-data_2.6.8-2ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.6.8-2ub untu1.2_all.deb


• Ubuntu gimp-dbg_2.6.8-2ubuntu1.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-dbg_2.6.8-2ubu ntu1.2_amd64.deb


• Ubuntu gimp_2.6.8-2ubuntu1.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp_2.6.8-2ubuntu1 .2_amd64.deb


• Ubuntu libgimp2.0-dev_2.6.8-2ubuntu1.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-dev_2.6. 8-2ubuntu1.2_amd64.deb


• Ubuntu libgimp2.0-doc_2.6.8-2ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.6. 8-2ubuntu1.2_all.deb


• Ubuntu libgimp2.0_2.6.8-2ubuntu1.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0_2.6.8-2u buntu1.2_amd64.deb

Ubuntu Ubuntu Linux 9.10 ARM

• Ubuntu gimp-data_2.6.7-1ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.6.7-1ub untu1.2_all.deb


• Ubuntu gimp-dbg_2.6.7-1ubuntu1.2_armel.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-dbg_2.6.7-1ubuntu1.2_arm el.deb


• Ubuntu gimp_2.6.7-1ubuntu1.2_armel.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp_2.6.7-1ubuntu1.2_armel.d eb


• Ubuntu libgimp2.0-dev_2.6.7-1ubuntu1.2_armel.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0-dev_2.6.7-1ubuntu1 .2_armel.deb


• Ubuntu libgimp2.0-doc_2.6.7-1ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.6. 7-1ubuntu1.2_all.deb


• Ubuntu libgimp2.0_2.6.7-1ubuntu1.2_armel.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0_2.6.7-1ubuntu1.2_a rmel.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu gimp-data_2.6.7-1ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.6.7-1ub untu1.2_all.deb


• Ubuntu gimp-dbg_2.6.7-1ubuntu1.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-dbg_2.6.7-1ubu ntu1.2_amd64.deb


• Ubuntu gimp_2.6.7-1ubuntu1.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp_2.6.7-1ubuntu1 .2_amd64.deb


• Ubuntu libgimp2.0-dev_2.6.7-1ubuntu1.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-dev_2.6. 7-1ubuntu1.2_amd64.deb


• Ubuntu libgimp2.0-doc_2.6.7-1ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.6. 7-1ubuntu1.2_all.deb


• Ubuntu libgimp2.0_2.6.7-1ubuntu1.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0_2.6.7-1u buntu1.2_amd64.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva gimp-2.4.7-1.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva gimp-python-2.4.7-1.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gimp2.0-devel-2.4.7-1.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gimp2.0_0-2.4.7-1.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 10.04 ARM

• Ubuntu gimp-data_2.6.8-2ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.6.8-2ub untu1.2_all.deb


• Ubuntu gimp-dbg_2.6.8-2ubuntu1.2_armel.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-dbg_2.6.8-2ubuntu1.2_arm el.deb


• Ubuntu gimp_2.6.8-2ubuntu1.2_armel.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp_2.6.8-2ubuntu1.2_armel.d eb


• Ubuntu libgimp2.0-dev_2.6.8-2ubuntu1.2_armel.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0-dev_2.6.8-2ubuntu1 .2_armel.deb


• Ubuntu libgimp2.0-doc_2.6.8-2ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.6. 8-2ubuntu1.2_all.deb


• Ubuntu libgimp2.0_2.6.8-2ubuntu1.2_armel.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0_2.6.8-2ubuntu1.2_a rmel.deb

Ubuntu Ubuntu Linux 10.04 i386

• Ubuntu gimp-data_2.6.8-2ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.6.8-2ub untu1.2_all.deb


• Ubuntu gimp-dbg_2.6.8-2ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-dbg_2.6.8-2ubu ntu1.2_i386.deb


• Ubuntu gimp_2.6.8-2ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp_2.6.8-2ubuntu1 .2_i386.deb


• Ubuntu libgimp2.0-dev_2.6.8-2ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-dev_2.6. 8-2ubuntu1.2_i386.deb


• Ubuntu libgimp2.0-doc_2.6.8-2ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.6. 8-2ubuntu1.2_all.deb


• Ubuntu libgimp2.0_2.6.8-2ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0_2.6.8-2u buntu1.2_i386.deb

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva gimp-2.4.7-1.2mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva gimp-python-2.4.7-1.2mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gimp2.0-devel-2.4.7-1.2mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gimp2.0_0-2.4.7-1.2mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 10.10 ARM

• Ubuntu gimp-data_2.6.10-1ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.6.10-1u buntu3.2_all.deb


• Ubuntu gimp-dbg_2.6.10-1ubuntu3.2_armel.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-dbg_2.6.10-1ubuntu3.2_ar mel.deb


• Ubuntu gimp_2.6.10-1ubuntu3.2_armel.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp_2.6.10-1ubuntu3.2_armel. deb


• Ubuntu libgimp2.0-dev_2.6.10-1ubuntu3.2_armel.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0-dev_2.6.10-1ubuntu 3.2_armel.deb


• Ubuntu libgimp2.0-doc_2.6.10-1ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.6. 10-1ubuntu3.2_all.deb


• Ubuntu libgimp2.0_2.6.10-1ubuntu3.2_armel.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0_2.6.10-1ubuntu3.2_ armel.deb

MandrakeSoft Enterprise Server 5

• Mandriva gimp-2.4.7-1.2mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva gimp-python-2.4.7-1.2mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgimp2.0-devel-2.4.7-1.2mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgimp2.0_0-2.4.7-1.2mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu gimp-data_2.4.5-1ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.4.5-1ub untu2.3_all.deb


• Ubuntu gimp-dbg_2.4.5-1ubuntu2.3_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-dbg_2.4.5-1ubuntu2.3_lpi a.deb


• Ubuntu gimp-gnomevfs_2.4.5-1ubuntu2.3_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-gnomevfs_2.4.5-1ubuntu2. 3_lpia.deb


• Ubuntu gimp-libcurl_2.4.5-1ubuntu2.3_lpia.deb
  http://ports.ubuntu.com/pool/universe/g/gimp/gimp-libcurl_2.4.5-1ubunt u2.3_lpia.deb


• Ubuntu gimp-python_2.4.5-1ubuntu2.3_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-python_2.4.5-1ubuntu2.3_ lpia.deb


• Ubuntu gimp_2.4.5-1ubuntu2.3_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp_2.4.5-1ubuntu2.3_lpia.de b


• Ubuntu libgimp2.0-dev_2.4.5-1ubuntu2.3_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0-dev_2.4.5-1ubuntu2 .3_lpia.deb


• Ubuntu libgimp2.0-doc_2.4.5-1ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.4. 5-1ubuntu2.3_all.deb


• Ubuntu libgimp2.0_2.4.5-1ubuntu2.3_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0_2.4.5-1ubuntu2.3_l pia.deb

Mandriva Linux Mandrake 2010.1

• Mandriva gimp-2.6.8-3.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva gimp-python-2.6.8-3.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgimp2.0-devel-2.6.8-3.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgimp2.0_0-2.6.8-3.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2009.0

• Mandriva gimp-2.4.7-1.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva gimp-python-2.4.7-1.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgimp2.0-devel-2.4.7-1.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgimp2.0_0-2.4.7-1.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 10.10 powerpc

• Ubuntu gimp-data_2.6.10-1ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.6.10-1u buntu3.2_all.deb


• Ubuntu gimp-dbg_2.6.10-1ubuntu3.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-dbg_2.6.10-1ubuntu3.2_po werpc.deb


• Ubuntu gimp_2.6.10-1ubuntu3.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp_2.6.10-1ubuntu3.2_powerp c.deb


• Ubuntu libgimp2.0-dev_2.6.10-1ubuntu3.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0-dev_2.6.10-1ubuntu 3.2_powerpc.deb


• Ubuntu libgimp2.0-doc_2.6.10-1ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.6. 10-1ubuntu3.2_all.deb


• Ubuntu libgimp2.0_2.6.10-1ubuntu3.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0_2.6.10-1ubuntu3.2_ powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu gimp-data_2.4.5-1ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.4.5-1ub untu2.3_all.deb


• Ubuntu gimp-dbg_2.4.5-1ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-dbg_2.4.5-1ubu ntu2.3_i386.deb


• Ubuntu gimp-gnomevfs_2.4.5-1ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-gnomevfs_2.4.5 -1ubuntu2.3_i386.deb


• Ubuntu gimp-libcurl_2.4.5-1ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gimp/gimp-libcurl_2. 4.5-1ubuntu2.3_i386.deb


• Ubuntu gimp-python_2.4.5-1ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-python_2.4.5-1 ubuntu2.3_i386.deb


• Ubuntu gimp_2.4.5-1ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp_2.4.5-1ubuntu2 .3_i386.deb


• Ubuntu libgimp2.0-dev_2.4.5-1ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-dev_2.4. 5-1ubuntu2.3_i386.deb


• Ubuntu libgimp2.0-doc_2.4.5-1ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.4. 5-1ubuntu2.3_all.deb


• Ubuntu libgimp2.0_2.4.5-1ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0_2.4.5-1u buntu2.3_i386.deb

Ubuntu Ubuntu Linux 10.10 i386

• Ubuntu gimp-data_2.6.10-1ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.6.10-1u buntu3.2_all.deb


• Ubuntu gimp-dbg_2.6.10-1ubuntu3.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-dbg_2.6.10-1ub untu3.2_i386.deb


• Ubuntu gimp_2.6.10-1ubuntu3.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp_2.6.10-1ubuntu 3.2_i386.deb


• Ubuntu libgimp2.0-dev_2.6.10-1ubuntu3.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-dev_2.6. 10-1ubuntu3.2_i386.deb


• Ubuntu libgimp2.0-doc_2.6.10-1ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.6. 10-1ubuntu3.2_all.deb


• Ubuntu libgimp2.0_2.6.10-1ubuntu3.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0_2.6.10-1 ubuntu3.2_i386.deb

Ubuntu Ubuntu Linux 10.04 sparc

• Ubuntu gimp-data_2.6.8-2ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/gimp-data_2.6.8-2ub untu1.2_all.deb


• Ubuntu gimp-dbg_2.6.8-2ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp-dbg_2.6.8-2ubuntu1.2_spa rc.deb


• Ubuntu gimp_2.6.8-2ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/gimp_2.6.8-2ubuntu1.2_sparc.d eb


• Ubuntu libgimp2.0-dev_2.6.8-2ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0-dev_2.6.8-2ubuntu1 .2_sparc.deb


• Ubuntu libgimp2.0-doc_2.6.8-2ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gimp/libgimp2.0-doc_2.6. 8-2ubuntu1.2_all.deb


• Ubuntu libgimp2.0_2.6.8-2ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gimp/libgimp2.0_2.6.8-2ubuntu1.2_s parc.deb

GIMP Multiple File Plugins Remote Stack Buffer Overflow Vulnerabilities

References:

• #608497 gimp: four buffer overflows (non customers)
  
• Avaya security advisory ASA-2011-162 (Avaya)
  
• GIMP Homepage (GIMP)
  
• ASA-2011-162 gimp security update (RHSA-2011-0838) (Avaya)
  
• ASA-2012-134 Oracle GIMP Critical Update Combined CVEs (November 2011) (Avaya)
  
• Multiple Buffer Overflow vulnerabilities in GIMP (Oracle)