CVE-2017-17786

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA image.
References
Link Resource
https://bugzilla.gnome.org/show_bug.cgi?id=739134 Issue Tracking Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/12/19/5 Mailing List Third Party Advisory
https://www.debian.org/security/2017/dsa-4077 Third Party Advisory
http://www.securityfocus.com/bid/102765 Third Party Advisory VDB Entry
https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html Mailing List Third Party Advisory
https://usn.ubuntu.com/3539-1/ Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:gimp:gimp:2.8.22:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

Information

Published : 2017-12-20 01:29

Updated : 2022-02-07 10:49


NVD link : CVE-2017-17786

Mitre link : CVE-2017-17786


JSON object : View

CWE
CWE-125

Out-of-bounds Read

Advertisement

dedicated server usa

Products Affected

debian

  • debian_linux

canonical

  • ubuntu_linux

gimp

  • gimp