Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
References
Link | Resource |
---|---|
http://osvdb.org/43453 | Broken Link |
https://www.gimp.org/news/2017/05/11/gimp-2-8-22-released/ | Vendor Advisory |
https://git.gnome.org/browse/gimp/commit/?id=323ecb73f7bf36788fb7066eb2d6678830cd5de7 | Patch Vendor Advisory |
https://bugzilla.gnome.org/show_bug.cgi?id=778604 | Issue Tracking Third Party Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/34789 | Third Party Advisory VDB Entry |
http://www.securityfocus.com/archive/1/470751/100/0/threaded | Broken Link Third Party Advisory VDB Entry |
Configurations
Information
Published : 2007-06-07 17:30
Updated : 2022-02-07 09:28
NVD link : CVE-2007-3126
Mitre link : CVE-2007-3126
JSON object : View
CWE
Products Affected
gimp
- gimp