CVE-2006-4519

Published Jul 10, 2007

Last updated 3 years ago

Overview

Description: Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.
Source: cve@mitre.org
NVD status: Analyzed

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.8
Impact score: 6.4
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-190

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A3731BD9-F1B7-4DD0-8D56-96D16D0684D2",
            "versionEndExcluding": "2.2.16"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References