CVE-2007-2356 Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.
MediumCVSS 6.8
EPSS 15.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gimp | = 2.2.14 | No fix listed |
| debian/gimp(Debian:12) | < 2.2.14-2 | 2.2.14-2 |
| debian/gimp(Debian:13) | < 2.2.14-2 | 2.2.14-2 |
| debian/gimp(Debian:14) | < 2.2.14-2 | 2.2.14-2 |
References
- SUSE-SR:2007:011 third-party-advisory vendor-advisory
- 25012 broken-link third-party-advisory
- 25111 broken-link third-party-advisory
- 25167 broken-link third-party-advisory
- 25239 broken-link third-party-advisory
- 25346 broken-link third-party-advisory
- 25359 broken-link third-party-advisory
- 25466 broken-link third-party-advisory
- 25573 broken-link third-party-advisory
- 28114 broken-link third-party-advisory
- GLSA-200705-08 third-party-advisory vendor-advisory
- 103170 broken-link third-party-advisory vendor-advisory
- 201320 broken-link third-party-advisory vendor-advisory
- DSA-1301 patch third-party-advisory vendor-advisory
- MDKSA-2007:108 broken-link vendor-advisory
- RHSA-2007:0343 patch third-party-advisory vendor-advisory
- 20070430 FLEA-2007-0015-1: gimp mailing-list third-party-advisory vdb-entry
- 23680 exploit patch third-party-advisory vdb-entry
- 1018092 third-party-advisory vdb-entry
- USN-467-1 third-party-advisory vendor-advisory
- ADV-2007-1560 broken-link vdb-entry vendor-advisory
- ADV-2007-4241 broken-link vdb-entry vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- gimp-sunras-plugin-bo(33911) third-party-advisory vdb-entry
- issues.rpath.com broken-link
- oval:org.mitre.oval:def:10054 signature tool-signature vdb-entry
- oval:org.mitre.oval:def:5960 signature tool-signature vdb-entry
- Debian Security Tracker CVE-2007-2356 vendor-advisory