GIMP XWD Plugin "load_image()" Buffer Overflow Vulnerability

Last Update Date: 6 Dec 2013 11:33 Release Date: 6 Dec 2013 3491 Views

RISK: Medium Risk

TYPE: Clients - Graphics & Design

A vulnerability have been reported in GIMP, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error within the "load_image()" function (plug-ins/common/file-xwd.c) and can be exploited to cause a heap-based buffer overflow via a specially crafted XWD file.

Impact

Remote Code Execution

System / Technologies affected

Version 2.8.10. Other versions may also be affected.

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Fixed in the source code repository.

Vulnerability Identifier

CVE-2013-1978

Source

Secunia