CVE-2010-4543
published 2011-01-07CVE-2010-4543: Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a…
high7.5CVSS 3.1
AVNACLAuNCPIPAP
EXPLOIT
Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image. NOTE: some of these details are obtained from third party information.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gimp | < gimp 2.6.11-2 (bookworm) | gimp 2.6.11-2 (bookworm) |
| debian | gimp | < gimp 2.6.11-3 (bookworm) | gimp 2.6.11-3 (bookworm) |
| gimp | gimp | — | — |
| gimp | gimp | >= 0 < 2.6.11-3 | 2.6.11-3 |
| gimp | gimp | >= 0 < 2.6.11-2 | 2.6.11-2 |
| gimp | gimp | >= 0 < 2.6.11-3 | 2.6.11-3 |
| gimp | gimp | >= 0 < 2.6.11-2 | 2.6.11-2 |
| gimp | gimp | >= 0 < 2.6.11-3 | 2.6.11-3 |
| gimp | gimp | >= 0 < 2.6.11-2 | 2.6.11-2 |
| gimp | gimp | >= 0 < 2.6.11-3 | 2.6.11-3 |
| gimp | gimp | >= 0 < 2.6.11-2 | 2.6.11-2 |
CVSS provenance
nvd7.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH