cbcvebase.
CVE-2007-2356
published 2007-04-30

CVE-2007-2356: Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute…

medium6.8CVSS 3.1
AVNACMAuNCPIPAP
EXPLOIT
Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.

Affected

6 ranges
VendorProductVersion rangeFixed in
debiangimp< gimp 2.2.14-2 (bookworm)gimp 2.2.14-2 (bookworm)
gimpgimp
gimpgimp>= 0 < 2.2.14-22.2.14-2
gimpgimp>= 0 < 2.2.14-22.2.14-2
gimpgimp>= 0 < 2.2.14-22.2.14-2
gimpgimp>= 0 < 2.2.14-22.2.14-2

CVSS provenance

nvd6.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv6.8MEDIUM