CVE-2012-5576
published 2012-12-18CVE-2012-5576: Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service…
high7.5CVSS 3.1
AVNACLAuNCPIPAP
Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large (1) red, (2) green, or (3) blue color mask in an XWD file.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gimp | < gimp 2.8.2-2 (bookworm) | gimp 2.8.2-2 (bookworm) |
| gimp | gimp | < 2.8.4 | 2.8.4 |
| gimp | gimp | >= 0 < 2.8.2-2 | 2.8.2-2 |
| gimp | gimp | >= 0 < 2.8.2-2 | 2.8.2-2 |
| gimp | gimp | >= 0 < 2.8.2-2 | 2.8.2-2 |
| gimp | gimp | >= 0 < 2.8.2-2 | 2.8.2-2 |
CVSS provenance
nvd7.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH