CVE-2007-3741 - The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote att

CVE-2007-3741

Summary

The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (crash or memory consumption) via crafted image files, as discovered using the fusil fuzzing tool.

References

Vulnerable Configurations

cpe:2.3:o:mandriva:linux:*:*:*:*:*:*:*:*
cpe:2.3:o:mandriva:linux:*:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gimp:*:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gimp:*:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 13-02-2023 - 02:18)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:N/A:P

oval via4

accepted

2013-04-29T04:01:37.390-04:00

class

vulnerability

contributors

name Aharon Chernin
organization SCAP.com, LLC
name Dragos Prisaca
organization G2, Inc.

definition_extensions

comment The operating system installed on the system is Red Hat Enterprise Linux 3
oval oval:org.mitre.oval:def:11782
comment CentOS Linux 3.x
oval oval:org.mitre.oval:def:16651
comment The operating system installed on the system is Red Hat Enterprise Linux 4
oval oval:org.mitre.oval:def:11831
comment CentOS Linux 4.x
oval oval:org.mitre.oval:def:16636
comment Oracle Linux 4.x
oval oval:org.mitre.oval:def:15990
comment The operating system installed on the system is Red Hat Enterprise Linux 5
oval oval:org.mitre.oval:def:11414
comment The operating system installed on the system is CentOS Linux 5.x
oval oval:org.mitre.oval:def:15802
comment Oracle Linux 5.x
oval oval:org.mitre.oval:def:15459

description

family

unix

oval:org.mitre.oval:def:10099

status

accepted

submitted

2010-07-09T03:56:16-04:00

title

version

redhat via4

advisories

bugzilla

id	248053
title	CVE-2007-3741 Gimp image loader multiple input validation flaws

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 4 is installed
oval oval:com.redhat.rhba:tst:20070304025

AND
comment gimp is earlier than 1:2.0.5-7.0.7.el4
oval oval:com.redhat.rhsa:tst:20070513001
comment gimp is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060598002
AND
comment gimp-devel is earlier than 1:2.0.5-7.0.7.el4
oval oval:com.redhat.rhsa:tst:20070513003
comment gimp-devel is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060598004

AND

comment Red Hat Enterprise Linux 5 is installed
oval oval:com.redhat.rhba:tst:20070331005

AND
comment gimp is earlier than 2:2.2.13-2.0.7.el5
oval oval:com.redhat.rhsa:tst:20070513006
comment gimp is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070343007
AND
comment gimp-devel is earlier than 2:2.2.13-2.0.7.el5
oval oval:com.redhat.rhsa:tst:20070513008
comment gimp-devel is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070343009
AND
comment gimp-libs is earlier than 2:2.2.13-2.0.7.el5
oval oval:com.redhat.rhsa:tst:20070513010
comment gimp-libs is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070343011

rhsa

id	RHSA-2007:0513
released	2007-09-26
severity	Moderate
title	RHSA-2007:0513: gimp security update (Moderate)

rpms

gimp-1:1.2.1-7.8.el2_1
gimp-1:1.2.3-20.9.el3
gimp-1:2.0.5-7.0.7.el4
gimp-2:2.2.13-2.0.7.el5
gimp-debuginfo-1:2.0.5-7.0.7.el4
gimp-debuginfo-2:2.2.13-2.0.7.el5
gimp-devel-1:1.2.1-7.8.el2_1
gimp-devel-1:1.2.3-20.9.el3
gimp-devel-1:2.0.5-7.0.7.el4
gimp-devel-2:2.2.13-2.0.7.el5
gimp-libs-2:2.2.13-2.0.7.el5
gimp-perl-1:1.2.1-7.8.el2_1
gimp-perl-1:1.2.3-20.9.el3

refmap via4

bid	25424
mandriva	MDKSA-2007:170
osvdb	42128 42129 42130 42131
secunia	26575 26939

Last major update

13-02-2023 - 02:18

Published

27-08-2007 - 17:17

Last modified

13-02-2023 - 02:18