CVE

Id
47124  
CVE No.
CVE-2010-4540  
Status
Candidate  
Description
Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Position field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20101209)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
515459 47124 CVE-2010-4540 MLIST:[oss-security] 20110103 CVE request for buffer overflows in gimp  View
515460 47124 CVE-2010-4540 URL:http://openwall.com/lists/oss-security/2011/01/03/2  View
515461 47124 CVE-2010-4540 MLIST:[oss-security] 20110104 Re: CVE request for buffer overflows in gimp  View
515462 47124 CVE-2010-4540 URL:http://openwall.com/lists/oss-security/2011/01/04/7  View
515463 47124 CVE-2010-4540 MISC:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608497  View
515464 47124 CVE-2010-4540 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=666793  View
515465 47124 CVE-2010-4540 GENTOO:GLSA-201209-23  View
515466 47124 CVE-2010-4540 URL:http://security.gentoo.org/glsa/glsa-201209-23.xml  View
515467 47124 CVE-2010-4540 MANDRIVA:MDVSA-2011:103  View
515468 47124 CVE-2010-4540 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:103  View
515469 47124 CVE-2010-4540 REDHAT:RHSA-2011:0838  View
515470 47124 CVE-2010-4540 URL:http://www.redhat.com/support/errata/RHSA-2011-0838.html  View
515471 47124 CVE-2010-4540 REDHAT:RHSA-2011:0839  View
515472 47124 CVE-2010-4540 URL:http://www.redhat.com/support/errata/RHSA-2011-0839.html  View
515473 47124 CVE-2010-4540 SUSE:SUSE-SR:2011:005  View
515474 47124 CVE-2010-4540 URL:http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html  View
515475 47124 CVE-2010-4540 OSVDB:70282  View
515476 47124 CVE-2010-4540 URL:http://osvdb.org/70282  View
515477 47124 CVE-2010-4540 SECUNIA:42771  View
515478 47124 CVE-2010-4540 URL:http://secunia.com/advisories/42771  View
515479 47124 CVE-2010-4540 SECUNIA:44750  View
515480 47124 CVE-2010-4540 URL:http://secunia.com/advisories/44750  View
515481 47124 CVE-2010-4540 SECUNIA:50737  View
515482 47124 CVE-2010-4540 URL:http://secunia.com/advisories/50737  View
515483 47124 CVE-2010-4540 VUPEN:ADV-2011-0016  View
515484 47124 CVE-2010-4540 URL:http://www.vupen.com/english/advisories/2011/0016  View
515485 47124 CVE-2010-4540 XF:gimp-lightning-effects-bo(64582)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37722 JVNDB-2010-003507 IBM Lotus Notes Traveler のサーブレットにおけるクロスサイトスクリプティングの脆弱性 IBM Lotus Notes Traveler のサーブレットには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-4544 47124 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003507.html  View