CVE-2012-5576

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2012-5576 at MITRE

Description

Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large (1) red, (2) green, or (3) blue color mask in an XWD file.

NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

SUSE information

SUSE Bugzilla entry: 791372

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Desktop 11 SP3
  • gimp >= 2.6.2-3.34.45.1
  • gimp-lang >= 2.6.2-3.34.45.1
  • gimp-plugins-python >= 2.6.2-3.34.45.1
Patchnames:
sledsp3-gimp
SUSE Linux Enterprise Software Development Kit 11 SP3
  • gimp >= 2.6.2-3.34.45.1
  • gimp-devel >= 2.6.2-3.34.45.1
  • gimp-lang >= 2.6.2-3.34.45.1
  • gimp-plugins-python >= 2.6.2-3.34.45.1
Patchnames:
sdksp3-gimp
SUSE Linux Enterprise Software Development Kit 11 SP3
  • gimp >= 2.6.2-3.34.45.1
  • gimp-devel >= 2.6.2-3.34.45.1
  • gimp-lang >= 2.6.2-3.34.45.1
  • gimp-plugins-python >= 2.6.2-3.34.45.1
Builds
SAT Patch Nr: 8856
SUSE Linux Enterprise Desktop 11 SP3
  • gimp >= 2.6.2-3.34.45.1
  • gimp-lang >= 2.6.2-3.34.45.1
  • gimp-plugins-python >= 2.6.2-3.34.45.1
Builds
SAT Patch Nr: 8856
openSUSE Evergreen 11.4
  • gimp >= 2.6.11-13.62.1
  • gimp-branding-upstream >= 2.6.11-13.62.1
  • gimp-debuginfo >= 2.6.11-13.62.1
  • gimp-debugsource >= 2.6.11-13.62.1
  • gimp-devel >= 2.6.11-13.62.1
  • gimp-devel-debuginfo >= 2.6.11-13.62.1
  • gimp-help-browser >= 2.6.11-13.62.1
  • gimp-help-browser-debuginfo >= 2.6.11-13.62.1
  • gimp-lang >= 2.6.11-13.62.1
  • gimp-module-hal >= 2.6.11-13.62.1
  • gimp-module-hal-debuginfo >= 2.6.11-13.62.1
  • gimp-plugins-python >= 2.6.11-13.62.1
  • gimp-plugins-python-debuginfo >= 2.6.11-13.62.1
  • libgimp-2_0-0 >= 2.6.11-13.62.1
  • libgimp-2_0-0-32bit >= 2.6.11-13.62.1
  • libgimp-2_0-0-debuginfo >= 2.6.11-13.62.1
  • libgimp-2_0-0-debuginfo-32bit >= 2.6.11-13.62.1
  • libgimp-2_0-0-debuginfo-x86 >= 2.6.11-13.62.1
  • libgimp-2_0-0-x86 >= 2.6.11-13.62.1
  • libgimpui-2_0-0 >= 2.6.11-13.62.1
  • libgimpui-2_0-0-32bit >= 2.6.11-13.62.1
  • libgimpui-2_0-0-debuginfo >= 2.6.11-13.62.1
  • libgimpui-2_0-0-debuginfo-32bit >= 2.6.11-13.62.1
  • libgimpui-2_0-0-debuginfo-x86 >= 2.6.11-13.62.1
  • libgimpui-2_0-0-x86 >= 2.6.11-13.62.1
Patchnames:
2012-17