GIMP CVE-2012-2763 Buffer Overflow Vulnerability

Bugtraq ID:	53741
Class:	Boundary Condition Error
CVE:	CVE-2012-2763
Remote:	Yes
Local:	No
Published:	May 31 2012 12:00AM
Updated:	Sep 28 2012 01:20PM
Credit:	Joseph Sheridan
Vulnerable:	SuSE openSUSE 12.1 SuSE openSUSE 11.4 Sun Solaris 11 GIMP GIMP 2.6.7 GIMP GIMP 2.6.6 GIMP GIMP 2.6.12 GIMP GIMP 2.6.11 Gentoo Linux
Not Vulnerable:	GIMP GIMP 2.8.0

GIMP CVE-2012-2763 Buffer Overflow Vulnerability

GIMP is prone to a buffer-overflow vulnerability.

Successfully exploiting this issue may allow attackers to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

GIMP versions 2.6.12 and prior are vulnerable.

GIMP CVE-2012-2763 Buffer Overflow Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/53741.c
• /data/vulnerabilities/exploits/53741.rb
• /data/vulnerabilities/exploits/53741-2.rb
• /data/vulnerabilities/exploits/53741.py

GIMP CVE-2012-2763 Buffer Overflow Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

GIMP CVE-2012-2763 Buffer Overflow Vulnerability

References:

• CVE-2012-2763 Buffer overflow vulnerability in Gimp (Oracle)
  
• Fix: ScriptFu Server Buffer Overflow in GIMP <= 2.6 (mancha)
  
• GIMP GIF Image Buffer Overflow Vulnerability Reference (GIMP)
  
• GIMP Homepage (GIMP)