GIMP XCF File Parsing Vulnerability

Last Update Date: 7 Jul 2016 10:13 Release Date: 7 Jul 2016 3677 Views

RISK: Medium Risk

TYPE: Clients - Graphics & Design

A vulnerability has been identified in GNU Image Manipulation Program (GIMP). A remote user can cause arbitrary code to be executed on the target user's system.

Impact

Remote Code Execution

System / Technologies affected

GIMP

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a source code fix, available at:
https://git.gnome.org/browse/gimp/commit/?id=e82aaa4b4ee0703c879e35ea9321fff6be3e9b6f

Vulnerability Identifier

CVE-2016-4994

Source

SecurityTracker