Unscored severity · published Jul 4, 2007
CVE-2007-2949
Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that…
–
CVSS
7.2%
EPSS
No
On KEV
Description
Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.2% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GI
Gimp · Gimp
through 2.2.15 · source: NVD
UL
Ubuntu Linux · Canonical
6.06; 6.10; 7.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2949
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2949
Broken Link
http://issues.foresightlinux.org/browse/FL-457
Broken Link
http://osvdb.org/37804
Broken Link
http://secunia.com/advisories/25677
Broken Link
http://secunia.com/advisories/25949
Broken Link
http://secunia.com/advisories/26044
Broken Link
http://secunia.com/advisories/26132
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation