GI
Product
GIMP
113
CVEs
0
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 2High 63Medium 21Low 0
Watch
Add GIMP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-4541 | – | Jan 7 | Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause… Affected: 2.6.11 |
| CVE-2010-4543 | – | Jan 7 | Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service… Affected: 2.6.11 |
| CVE-2009-3909 | – | Nov 19 | Integer overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a crafted PSD file that… Affected: 2.6.7 |
| CVE-2009-1570 | – | Nov 13 | Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width… Affected: 2.6.7 |
| CVE-2009-0733 | – | Mar 23 | Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow… Affected: before 2.9.2 |
| CVE-2009-0723 | – | Mar 23 | Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute… Affected: before 2.9.2 |
| CVE-2009-0581 | – | Mar 23 | Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service… Affected: before 2.9.2 |
| CVE-2006-4519 | – | Jul 10 | Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1)… Affected: before 2.2.16 |
| CVE-2007-2949 | – | Jul 4 | Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that… Affected: through 2.2.15 |
| CVE-2007-3126 | – | Jun 8 | Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to… Affected: before 2.8.22 |
| CVE-2007-2356 | – | Apr 30 | Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a… Affected: 2.2.14 |
| CVE-2006-3404 | – | Jul 6 | Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly… Affected: before 2.2.12 |
| CVE-2005-0654 | – | May 2 | gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) via the image descriptor (1) height or… Affected: 2.0.5; 2.2.3; 2.2.4 |