NVD

Id
55108  
Name
CVE-2007-2949  
Description
Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-07-04  
Modified Date
2012-10-30  
Seq
2007-2949  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
279991 55108 CVE-2007-2949 http://issues.foresightlinux.org/browse/FL-457  View
279992 55108 CVE-2007-2949 oval:org.mitre.oval:def:11276  View
279993 55108 CVE-2007-2949 oval:org.mitre.oval:def:5772  View
279994 55108 CVE-2007-2949 GLSA-200707-09  View
279995 55108 CVE-2007-2949 103170  View
279996 55108 CVE-2007-2949 201320  View
279997 55108 CVE-2007-2949 http://svn.gnome.org/viewcvs/gimp?view=revision&revision=22798  View
279998 55108 CVE-2007-2949 DSA-1335  View
279999 55108 CVE-2007-2949 VU#399896  View
280000 55108 CVE-2007-2949 MDKSA-2007:170  View
280001 55108 CVE-2007-2949 SUSE-SR:2007:015  View
280002 55108 CVE-2007-2949 RHSA-2007:0513  View
280003 55108 CVE-2007-2949 24745  View
280004 55108 CVE-2007-2949 SSA:2007-222-01  View
280005 55108 CVE-2007-2949 USN-480-1  View
280006 55108 CVE-2007-2949 ADV-2007-2421  View
280007 55108 CVE-2007-2949 ADV-2007-4241  View
280008 55108 CVE-2007-2949 gimp-unpackpixeldata-code-execution(35246)  View
280009 55108 CVE-2007-2949 https://issues.rpath.com/browse/RPL-1487  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52052 JVNDB-2007-000715 GIMP の PSD プラグインにおける psd.c の整数オーバーフローの脆弱性 GIMP の PSD プラグインには psd.c の seek_to_and_unpack_pixeldata() 関数において、PSD ファイルの width 値及び height 値の取り扱いに不備があり、整数オーバーフローが発生する脆弱性が存在します。 CVE-2007-2949 26304 CVE-2007-2949 55108 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000715.html 2007-07-04 2008-09-26 View