CVE-2006-3404

MEDIUM 5.1CVE-2006-3404 · Published 06/07/2006 · updated 16/06/2026

In short

CVE-2006-3404 is a MEDIUM (CVSS 5.1) vulnerability affecting gimp (gimp).
Chance of exploitation in the next 30 days (EPSS): 4.6%, higher than 91.7% of all vulnerabilities.
Fix: update to 2.2.12 or later.

Package	Affected versions	Patched versions
gimp gimp	`< 2.2.12`	`2.2.12`

Description

Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property.

References

bugs.debian.org/cgi-bin/bugreport.cgi · Third Party Advisory
bugzilla.gnome.org/show_bug.cgi · Issue Tracking
secunia.com/advisories/20976 · Broken Link
secunia.com/advisories/20979 · Broken Link
secunia.com/advisories/21069 · Broken Link
secunia.com/advisories/21104 · Broken Link
secunia.com/advisories/21170 · Broken Link
secunia.com/advisories/21182 · Broken Link
secunia.com/advisories/21198 · Broken Link
secunia.com/advisories/21459 · Broken Link
secunia.com/advisories/23044 · Broken Link
security.gentoo.org/glsa/glsa-200607-08.xml · Third Party Advisory
securitytracker.com/id · Broken Link
sunsolve.sun.com/search/document.do

More vulnerabilities in gimp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gimp

< 2.2.12

2.2.12

More vulnerabilities in gimp

See all →