CVE-2006-3404

Description

Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5908

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11259

https://exchange.xforce.ibmcloud.com/vulnerabilities/27687

http://www.ubuntu.com/usn/usn-312-1

http://www.debian.org/security/2006/dsa-1116

http://security.gentoo.org/glsa/glsa-200607-08.xml

http://bugzilla.gnome.org/show_bug.cgi?id=346742

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=377049

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3