Unscored severity · published Jun 8, 2007
CVE-2007-3126
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to…
–
CVSS
2.9%
EPSS
No
On KEV
Description
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GI
Gimp · Gimp
before 2.8.22 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3126
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3126
Broken Link
http://osvdb.org/43453
Broken Link
http://www.securityfocus.com/archive/1/470751/100/0/threaded
Issue Tracking
https://bugzilla.gnome.org/show_bug.cgi?id=778604
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34789
Patch
https://git.gnome.org/browse/gimp/commit/?id=323ecb73f7bf36788fb7066eb2d6678830cd5de7
Vendor Advisory
https://www.gimp.org/news/2017/05/11/gimp-2-8-22-released/
More from Gimp
9.9
CVE-2026-59090
Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow
9.1
CVE-2018-12713
GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_write_and_read_file…
8.8
CVE-2026-2044
GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability
8.8
CVE-2026-0797
GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
8.8
CVE-2025-5473
GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability