GIMP GIF Image Parsing 'LZWReadByte()' Buffer Overflow Vulnerability
BID:49148
Info
GIMP GIF Image Parsing 'LZWReadByte()' Buffer Overflow Vulnerability
| Bugtraq ID: | 49148 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2011-2896 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 15 2011 12:00AM |
| Updated: | Apr 13 2015 09:59PM |
| Credit: | Red Hat Security Response Team |
| Vulnerable: |
Xerox FreeFlow Print Server (FFPS) 73.C0.41 Xerox FreeFlow Print Server (FFPS) 73.B3.61 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SWI-Prolog SWI-Prolog 5.10.1 SWI-Prolog SWI-Prolog 5.10 Sun Solaris 11 Express Sun Solaris 10_x86 Sun Solaris 10_sparc Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 GIMP GIMP 2.6.7 GIMP GIMP 2.6.6 GIMP GIMP 2.4.6 GIMP GIMP 2.3.14 GIMP GIMP 2.3.10 GIMP GIMP 2.3.9 GIMP GIMP 2.2.17 GIMP GIMP 2.2.16 GIMP GIMP 2.2.15 GIMP GIMP 2.2.14 GIMP GIMP 2.2.12 GIMP GIMP 2.2.11 GIMP GIMP 2.2.8 GIMP GIMP 2.2.6 GIMP GIMP 2.2.4 GIMP GIMP 1.2.5 GIMP GIMP 2.6.11 GIMP GIMP 2.6.11 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Avaya Proactive Contact 5.0 Avaya IR 4.0 Avaya IQ 5.2 Avaya IQ 5.1.1 Avaya IQ 5.1 Avaya IQ 5 Avaya Communication Server 1000M Signaling Server 7.5 Avaya Communication Server 1000M Signaling Server 7.0 Avaya Communication Server 1000M 7.5 Avaya Communication Server 1000M 7.0 Avaya Communication Server 1000E Signaling Server 7.5 Avaya Communication Server 1000E Signaling Server 7.0 Avaya Communication Server 1000E 7.5 Avaya Communication Server 1000E 7.0 Avaya Aura System Manager 6.2.3 Avaya Aura System Manager 6.2 Avaya Aura System Manager 6.1.3 Avaya Aura System Manager 6.1.2 Avaya Aura System Manager 6.1.1 Avaya Aura System Manager 6.1 SP2 Avaya Aura System Manager 6.1 Sp1 Avaya Aura System Manager 6.1 Avaya Aura System Manager 6.0 SP1 Avaya Aura System Manager 6.0 Avaya Aura System Manager 5.2 Avaya Aura Presence Services 6.1.1 Avaya Aura Presence Services 6.1 Avaya Aura Presence Services 6.0 Avaya Aura Experience Portal 6.0 Avaya Aura Communication Manager Utility Services 6.1 Avaya Aura Communication Manager Utility Services 6.0 Avaya 96x1 IP Deskphone 6 |
| Not Vulnerable: |
SWI-Prolog SWI-Prolog 5.10.2 Avaya Aura System Manager 6.3 |
Discussion
GIMP GIF Image Parsing 'LZWReadByte()' Buffer Overflow Vulnerability
GIMP is prone to a buffer-overflow vulnerability
Successfully exploiting this issue may allow attackers to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
GIMP is prone to a buffer-overflow vulnerability
Successfully exploiting this issue may allow attackers to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
Exploit / POC
GIMP GIF Image Parsing 'LZWReadByte()' Buffer Overflow Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
GIMP GIF Image Parsing 'LZWReadByte()' Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.1 x86_64
Mandriva Linux Mandrake 2009.0 x86_64
MandrakeSoft Enterprise Server 5 x86_64
MandrakeSoft Enterprise Server 5
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.1 x86_64
-
Mandriva cups-1.4.3-3.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva cups-common-1.4.3-3.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva cups-serial-1.4.3-3.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva gimp-2.6.8-3.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva gimp-python-2.6.8-3.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64cups2-1.4.3-3.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64cups2-devel-1.4.3-3.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64gimp2.0-devel-2.6.8-3.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64gimp2.0_0-2.6.8-3.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-cups-1.4.3-3.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/downloads/
Mandriva Linux Mandrake 2009.0 x86_64
-
Mandriva cups-1.3.10-0.5mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva cups-common-1.3.10-0.5mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva cups-serial-1.3.10-0.5mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64cups2-1.3.10-0.5mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64cups2-devel-1.3.10-0.5mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-cups-1.3.10-0.5mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/downloads/
MandrakeSoft Enterprise Server 5 x86_64
-
Mandriva cups-1.3.10-0.5mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva cups-common-1.3.10-0.5mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva cups-serial-1.3.10-0.5mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva gimp-2.4.7-1.4mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva gimp-python-2.4.7-1.4mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64cups2-1.3.10-0.5mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64cups2-devel-1.3.10-0.5mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64gimp2.0-devel-2.4.7-1.4mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64gimp2.0_0-2.4.7-1.4mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-cups-1.3.10-0.5mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/
MandrakeSoft Enterprise Server 5
-
Mandriva cups-1.3.10-0.5mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva cups-common-1.3.10-0.5mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva cups-serial-1.3.10-0.5mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva gimp-2.4.7-1.4mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva gimp-python-2.4.7-1.4mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libcups2-1.3.10-0.5mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libcups2-devel-1.3.10-0.5mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libgimp2.0-devel-2.4.7-1.4mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libgimp2.0_0-2.4.7-1.4mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-cups-1.3.10-0.5mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/
References
GIMP GIF Image Parsing 'LZWReadByte()' Buffer Overflow Vulnerability
References:
References:
- Buffer overflow vulnerability in GIMP (Avaya)
- cups security and bug fix update (RHSA-2012-0302) (Avaya Inc.)
- CVE-2011-2896 Buffer overflow vulnerability in GIMP (Oracle)
- file-gif-load: fix heap corruption and buffer overflow (CVE-2011-2896) (Nils Philippsen)
- GIMP GIF Image Parsing 'LZWReadByte()' Buffer Overflow Vulnerability (Red Hat)
- GIMP Homepage (GIMP)
- ASA-2011-337 Wind River Linux xmlsec, DHCP, freetype, Perl Security Update (WIND (Avaya)
- ASA-2011-408 cups security and bug fix update (RHSA-2011-1635) (Avaya)
- ASA-2012-358 (Avaya)
- Xerox Security Bulletin XRX12-002 (Xerox)