GIMP integer overflow updated since 13.11.2009
Published:		17.11.2009
Source:		BUGTRAQ
SecurityVulns ID:		10403
Type:		local
Level:		3/10
Description:		Integer overflow on .BPM, .PSD files parsing.

Affected:		GNU : gimp 2.6
CVE:		CVE-2009-3909 (Integer overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a crafted PSD file that triggers a heap-based buffer overflow.)
		CVE-2009-1570 (Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.)

Original document		SECUNIA, Secunia Research: Gimp PSD Image Parsing Integer Overflow Vulnerability (17.11.2009)
		SECUNIA, Secunia Research: Gimp BMP Image Parsing Integer Overflow Vulnerability (13.11.2009)

Discuss:

Read or add your comments to this news (0 comments)