1. CVE-Search
  2. CVE-2007-2356
ID CVE-2007-2356
Summary Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.
References
Vulnerable Configurations
  • cpe:2.3:a:gimp:gimp:2.2.14:*:*:*:*:*:*:*
    cpe:2.3:a:gimp:gimp:2.2.14:*:*:*:*:*:*:*
CVSS
Base: 6.8 (as of 07-02-2022 - 19:21)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:P
oval via4
  • accepted 2013-04-29T04:00:58.248-04:00
    class vulnerability
    contributors
    • name Aharon Chernin
      organization SCAP.com, LLC
    • name Dragos Prisaca
      organization G2, Inc.
    definition_extensions
    • comment The operating system installed on the system is Red Hat Enterprise Linux 3
      oval oval:org.mitre.oval:def:11782
    • comment CentOS Linux 3.x
      oval oval:org.mitre.oval:def:16651
    • comment The operating system installed on the system is Red Hat Enterprise Linux 4
      oval oval:org.mitre.oval:def:11831
    • comment CentOS Linux 4.x
      oval oval:org.mitre.oval:def:16636
    • comment Oracle Linux 4.x
      oval oval:org.mitre.oval:def:15990
    • comment The operating system installed on the system is Red Hat Enterprise Linux 5
      oval oval:org.mitre.oval:def:11414
    • comment The operating system installed on the system is CentOS Linux 5.x
      oval oval:org.mitre.oval:def:15802
    • comment Oracle Linux 5.x
      oval oval:org.mitre.oval:def:15459
    description Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.
    family unix
    id oval:org.mitre.oval:def:10054
    status accepted
    submitted 2010-07-09T03:56:16-04:00
    title Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.
    version 31
  • accepted 2008-10-20T04:00:28.436-04:00
    class vulnerability
    contributors
    name Pai Peng
    organization Hewlett-Packard
    definition_extensions
    • comment Solaris 10 (SPARC) is installed
      oval oval:org.mitre.oval:def:1440
    • comment Solaris 9 (x86) is installed
      oval oval:org.mitre.oval:def:1683
    • comment Solaris 10 (x86) is installed
      oval oval:org.mitre.oval:def:1926
    description Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.
    family unix
    id oval:org.mitre.oval:def:5960
    status accepted
    submitted 2008-09-11T11:37:41.000-04:00
    title SUNRAS Plugin of Gimp Vulnerability
    version 35
redhat via4
advisories
bugzilla
id 238420
title CVE-2007-2356 Stack overflow in gimp's sunras plugin
oval
OR
  • comment Red Hat Enterprise Linux must be installed
    oval oval:com.redhat.rhba:tst:20070304026
  • AND
    • comment Red Hat Enterprise Linux 4 is installed
      oval oval:com.redhat.rhba:tst:20070304025
    • OR
      • AND
        • comment gimp is earlier than 1:2.0.5-6.2.el4
          oval oval:com.redhat.rhsa:tst:20070343001
        • comment gimp is signed with Red Hat master key
          oval oval:com.redhat.rhsa:tst:20060598002
      • AND
        • comment gimp-devel is earlier than 1:2.0.5-6.2.el4
          oval oval:com.redhat.rhsa:tst:20070343003
        • comment gimp-devel is signed with Red Hat master key
          oval oval:com.redhat.rhsa:tst:20060598004
  • AND
    • comment Red Hat Enterprise Linux 5 is installed
      oval oval:com.redhat.rhba:tst:20070331005
    • OR
      • AND
        • comment gimp is earlier than 2:2.2.13-2.el5
          oval oval:com.redhat.rhsa:tst:20070343006
        • comment gimp is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20070343007
      • AND
        • comment gimp-devel is earlier than 2:2.2.13-2.el5
          oval oval:com.redhat.rhsa:tst:20070343008
        • comment gimp-devel is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20070343009
      • AND
        • comment gimp-libs is earlier than 2:2.2.13-2.el5
          oval oval:com.redhat.rhsa:tst:20070343010
        • comment gimp-libs is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20070343011
rhsa
id RHSA-2007:0343
released 2007-05-21
severity Moderate
title RHSA-2007:0343: gimp security update (Moderate)
rpms
  • gimp-1:1.2.1-7.1.el2_1
  • gimp-1:1.2.3-20.3.el3
  • gimp-1:2.0.5-6.2.el4
  • gimp-2:2.2.13-2.el5
  • gimp-debuginfo-1:2.0.5-6.2.el4
  • gimp-debuginfo-2:2.2.13-2.el5
  • gimp-devel-1:1.2.1-7.1.el2_1
  • gimp-devel-1:1.2.3-20.3.el3
  • gimp-devel-1:2.0.5-6.2.el4
  • gimp-devel-2:2.2.13-2.el5
  • gimp-libs-2:2.2.13-2.el5
  • gimp-perl-1:1.2.1-7.1.el2_1
  • gimp-perl-1:1.2.3-20.3.el3
refmap via4
bid 23680
bugtraq 20070430 FLEA-2007-0015-1: gimp
confirm
debian DSA-1301
exploit-db 3801
gentoo GLSA-200705-08
mandriva MDKSA-2007:108
sectrack 1018092
secunia
  • 25012
  • 25111
  • 25167
  • 25239
  • 25346
  • 25359
  • 25466
  • 25573
  • 28114
sunalert
  • 103170
  • 201320
suse SUSE-SR:2007:011
ubuntu USN-467-1
vupen
  • ADV-2007-1560
  • ADV-2007-4241
xf gimp-sunras-plugin-bo(33911)
Last major update 07-02-2022 - 19:21
Published 30-04-2007 - 22:19
Last modified 07-02-2022 - 19:21
Back to Top