Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long string in a command to the script-fu server.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gimp: Heap-based buffer overflow in the script-fu console by sending overly long arguments to script-fu     server (CVE-2012-2763)

  - gimp: Use-after-free vulnerabilities in the channel and layer properties parsing process (CVE-2016-4994)

  - The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to     execute arbitrary commands via the python-fu-eval command. (CVE-2012-4245)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Solaris system is missing necessary patches to address security updates :

  - Buffer overflow in the readstr_upto function in     plug-ins/script-fu/tinyscheme/ scheme.c in GIMP 2.6.12     and earlier, and possibly 2.6.13, allows remote     attackers to execute arbitrary code via a long string in     a command to the script-fu server. (CVE-2012-2763)

Fixed 2 gimp security bugs :

  - fixed bnc#724628 CVE-2012-3481: gimp: GIF plugin     'height' / 'len' integer overflow leading to heap-based     buffer overflow

  - fixed bnc#763595 CVE-2012-2763: gimp: buffer overflow in     script-fu's server component

Multiple integer overflows in various decoder plug-ins of GIMP have been fixed.

This update of Gimp fixed a remotely exploitable buffer overflow in Script-Fu's server component as well as a NULL pointer dereference flaw in the fit format handler.

The remote host is affected by the vulnerability described in GLSA-201209-23 (GIMP: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in GIMP. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
198432	RHEL 6 : gimp (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
80619	Oracle Solaris Third-Party Patch Update : gimp (cve_2012_2763_buffer_overflow)	Nessus	Solaris Local Security Checks	high
74745	openSUSE Security Update : gimp (openSUSE-SU-2012:1131-1)	Nessus	SuSE Local Security Checks	high
74735	openSUSE Security Update : gimp (openSUSE-SU-2012:1080-1)	Nessus	SuSE Local Security Checks	high
64147	SuSE 11.1 Security Update : Gimp (SAT Patch Number 6542)	Nessus	SuSE Local Security Checks	high
62379	GLSA-201209-23 : GIMP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2012-2763

critical

Tenable Plugins

high

high

high

high

high

high