CVE-2012-2763
published 2012-07-12CVE-2012-2763: Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers…
high7.5CVSS 3.1
AVNACLAuNCPIPAP
EXPLOIT
Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long string in a command to the script-fu server.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gimp | < gimp 2.8.0-1 (bookworm) | gimp 2.8.0-1 (bookworm) |
| gimp | gimp | <= 2.6.13 | — |
| gimp | gimp | >= 0 < 2.8.0-1 | 2.8.0-1 |
| gimp | gimp | >= 0 < 2.8.0-1 | 2.8.0-1 |
| gimp | gimp | >= 0 < 2.8.0-1 | 2.8.0-1 |
| gimp | gimp | >= 0 < 2.8.0-1 | 2.8.0-1 |
CVSS provenance
nvd7.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH