CVE-2006-3404

TRUNG BÌNH 5.1CVE-2006-3404 · Công bố 06/07/2006 · cập nhật 16/06/2026

Tóm tắt nhanh

CVE-2006-3404 là lỗ hổng mức TRUNG BÌNH (CVSS 5.1) ảnh hưởng gimp (gimp).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 4.6%, cao hơn 91.7% các lỗ hổng khác.
Cách xử lý: cập nhật lên 2.2.12 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
gimp gimp	`< 2.2.12`	`2.2.12`

Mô tả

Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property.

Tham khảo

bugs.debian.org/cgi-bin/bugreport.cgi · Third Party Advisory
bugzilla.gnome.org/show_bug.cgi · Issue Tracking
secunia.com/advisories/20976 · Broken Link
secunia.com/advisories/20979 · Broken Link
secunia.com/advisories/21069 · Broken Link
secunia.com/advisories/21104 · Broken Link
secunia.com/advisories/21170 · Broken Link
secunia.com/advisories/21182 · Broken Link
secunia.com/advisories/21198 · Broken Link
secunia.com/advisories/21459 · Broken Link
secunia.com/advisories/23044 · Broken Link
security.gentoo.org/glsa/glsa-200607-08.xml · Third Party Advisory
securitytracker.com/id · Broken Link
sunsolve.sun.com/search/document.do · Broken Link
sunsolve.sun.com/search/document.do · Broken Link
debian.org/security/2006/dsa-1116 · Third Party Advisory
mandriva.com/security/advisories · Broken Link
novell.com/linux/security/advisories/2006_19_sr.html · Broken Link
osvdb.org/27037 · Broken Link
redhat.com/support/errata/RHSA-2006-0598.html · Broken Link
securityfocus.com/archive/1/440987/100/0/threaded · Broken Link
securityfocus.com/archive/1/441012/100/0/threaded · Broken Link
securityfocus.com/archive/1/441030/100/0/threaded · Broken Link
securityfocus.com/bid/18877 · Broken Link
ubuntu.com/usn/usn-312-1 · Third Party Advisory
vupen.com/english/advisories/2006/2703 · Broken Link
vupen.com/english/advisories/2006/4634 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/27687 · Third Party Advisory
issues.rpath.com/browse/RPL-522 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11259 · Tool Signature
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5908 · Tool Signature

Lỗ hổng khác của gimp

Xem tất cả →

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí