CVE-2017-17788

In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' character after the version string.
References
Link Resource
https://bugzilla.gnome.org/show_bug.cgi?id=790783 Issue Tracking Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/12/19/5 Mailing List Third Party Advisory
https://www.debian.org/security/2017/dsa-4077 Third Party Advisory
https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html Mailing List Third Party Advisory
https://usn.ubuntu.com/3539-1/ Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:gimp:gimp:2.8.22:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

Information

Published : 2017-12-20 01:29

Updated : 2022-02-07 10:47


NVD link : CVE-2017-17788

Mitre link : CVE-2017-17788


JSON object : View

CWE
CWE-125

Out-of-bounds Read

Advertisement

dedicated server usa

Products Affected

debian

  • debian_linux

canonical

  • ubuntu_linux

gimp

  • gimp