CVE-2012-5576

HIGH 7.5CVE-2012-5576 · Published 18/12/2012 · updated 16/06/2026

In short

CVE-2012-5576 is a HIGH (CVSS 7.5) vulnerability affecting gimp (gimp).
Chance of exploitation in the next 30 days (EPSS): 6.8%, higher than 94.0% of all vulnerabilities.
Fix: update to 2.8.4 or later.

Package	Affected versions	Patched versions
gimp gimp	`< 2.8.4`	`2.8.4`

Description

Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large (1) red, (2) green, or (3) blue color mask in an XWD file.

References

git.gnome.org/browse/gimp/commit · Patch
lists.opensuse.org/opensuse-updates/2012-12/msg00017.html · Third Party Advisory
lists.opensuse.org/opensuse-updates/2013-01/msg00014.html · Third Party Advisory
secunia.com/advisories/50296 · Broken Link
secunia.com/advisories/51479 · Broken Link
secunia.com/advisories/51528 · Broken Link
mandriva.com/security/advisories · Broken Link
openwall.com/lists/oss-security/2012/11/27/1 · Mailing List
securityfocus.com/bid/56647 · Third Party Advisory
ubuntu.com/usn/USN-1659-1 · Patch
bugzilla.gnome.org/show_bug.cgi · Exploit

More vulnerabilities in gimp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gimp

< 2.8.4

2.8.4

More vulnerabilities in gimp

See all →