CVE-2012-2763 Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long str...
HighCVSS 7.5
EPSS 81.7%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long string in a command to the script-fu server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/gimp(Debian:12) | < 2.8.0-1 | 2.8.0-1 |
| debian/gimp(Debian:13) | < 2.8.0-1 | 2.8.0-1 |
| debian/gimp(Debian:14) | < 2.8.0-1 | 2.8.0-1 |
| gimp | <= 2.6.13 | No fix listed |
References
- Debian Security Tracker CVE-2012-2763 vendor-advisory
- git.gnome.org exploit patch vendor-advisory
- openSUSE-SU-2012:1080 third-party-advisory vendor-advisory
- openSUSE-SU-2012:1131 third-party-advisory vendor-advisory
- 50737 broken-link third-party-advisory
- GLSA-201209-23 third-party-advisory vendor-advisory
- [oss-security] 20120530 ScriptFu Server Buffer Overflow in GIMP <= 2.6 mailing-list third-party-advisory
- [oss-security] 20120630 Re: ScriptFu Server Buffer Overflow in GIMP <= 2.6 mailing-list third-party-advisory
- www.reactionpenetrationtesting.co.uk third-party-advisory
- bugzilla.gnome.org issue-tracking third-party-advisory