ID CVE-2007-3126
Summary Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
References
Vulnerable Configurations
  • cpe:2.3:a:the_gimp_team:gimp:2.3.14
    cpe:2.3:a:the_gimp_team:gimp:2.3.14
CVSS
Base: 5.0 (as of 11-06-2007 - 08:21)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
nessus via4
  • NASL family SuSE Local Security Checks
    NASL id SUSE_SU-2017-0945-1.NASL
    description This update for gimp fixes the following issues: This security issue was fixed : - CVE-2007-3126: Context-dependent attackers were able to cause a denial of service via an ICO file with an InfoHeader containing a Height of zero (bsc#1032241). The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-11-30
    plugin id 99231
    published 2017-04-06
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=99231
    title SUSE SLED12 Security Update : gimp (SUSE-SU-2017:0945-1)
  • NASL family SuSE Local Security Checks
    NASL id OPENSUSE-2017-462.NASL
    description This update for gimp fixes the following issues : This security issue was fixed : - CVE-2007-3126: Context-dependent attackers were able to cause a denial of service via an ICO file with an InfoHeader containing a Height of zero (bsc#1032241). These non-security issues were fixed : - bsc#1025717: Prefer lcms2 over lcms1 if both are available - bgo#593576: Preven crash in PDF Import filter when importing large image PDF or specifying high resolution
    last seen 2019-02-21
    modified 2017-04-13
    plugin id 99326
    published 2017-04-13
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=99326
    title openSUSE Security Update : gimp (openSUSE-2017-462)
refmap via4
bugtraq 20070607 Re: CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files
confirm
osvdb 43453
xf gimp-ico-file-dos(34789)
statements via4
  • contributor Vincent Danen
    lastmodified 2007-09-17
    organization Mandriva
    statement Mandriva does not consider a user-assisted crash of an end-user application such as the GIMP to be a security issue.
  • contributor Joshua Bressers
    lastmodified 2007-06-29
    organization Red Hat
    statement Red Hat does not consider a user-assisted crash of a user application such as GIMP to be a security issue.
Last major update 30-10-2012 - 22:37
Published 07-06-2007 - 20:30
Last modified 16-10-2018 - 12:47
Back to Top