Fluid Attacks Database

Description

The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (crash or memory consumption) via crafted image files, as discovered using the fusil fuzzing tool.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	gimp	>=0 <2.2.17-1	2.2.17-1
debian 11	gimp	>=0 <2.2.17-1	2.2.17-1
debian 14	gimp	>=0 <2.2.17-1	2.2.17-1
rpm rhel5	gimp	<2:2.2.13-2.0.7.el5	2:2.2.13-2.0.7.el5
debian 13	gimp	>=0 <2.2.17-1	2.2.17-1

Aliases

1. CVE-2007-37412. NVD-2007-37413. OSV-DEBIAN-2007-37414. OSV-2007-37415. SECURITY-TRACKER-CVE-2007-3741

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.