CVE-2006-4519

MEDIUM 6.8CVE-2006-4519 · Published 10/07/2007 · updated 16/06/2026

In short

CVE-2006-4519 is a MEDIUM (CVSS 6.8) vulnerability affecting gimp (gimp).
Chance of exploitation in the next 30 days (EPSS): 5.6%, higher than 92.9% of all vulnerabilities.
Fix: update to 2.2.16 or later.

Package	Affected versions	Patched versions
gimp gimp	`< 2.2.16`	`2.2.16`

Description

Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.

References

bugzilla.gnome.org/show_bug.cgi · Issue Tracking
developer.gimp.org/NEWS-2.2 · Broken Link
issues.foresightlinux.org/browse/FL-457 · Broken Link
labs.idefense.com/intelligence/vulnerabilities/display.php · Broken Link
osvdb.org/42139 · Broken Link
osvdb.org/42140 · Broken Link
osvdb.org/42141 · Broken Link
osvdb.org/42142 · Broken Link
osvdb.org/42143 · Broken Link
osvdb.org/42144 · Broken Link
osvdb.org/42145 · Broken Link
secunia.com/advisories/26132 · Broken Link
secunia.com/advisories/26215 · Broken Link
secunia.com/advisories/26240 · Broken Link
secunia.com/advisories/26575

More vulnerabilities in gimp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gimp

< 2.2.16

2.2.16

More vulnerabilities in gimp

See all →