Description
A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the ico_read_info and ico_read_icon functions. This issue arises because a size calculation for image buffers can wrap around due to a 32-bit integer evaluation, allowing oversized image headers to bypass security checks. A remote attacker could exploit this by providing a specially crafted ICO file, leading to a buffer overflow and memory corruption, which may result in an application level denial of service.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 11 | | =2.10.22-4 || =2.10.22-4+deb11u1 || =2.10.22-4+deb11u2 || =2.10.22-4+deb11u3 || =2.10.22-4+deb11u4 || =2.10.22-4+deb11u5 || >=0 <2.10.22-4+deb11u6 | 2.10.22-4+deb11u6 |
debian 13 | | =3.0.4-3 || =3.0.4-3+deb13u1 || =3.0.4-3+deb13u2 || =3.0.4-3+deb13u3 || =3.0.4-3+deb13u4 || =3.0.4-3+deb13u5 || >=0 <3.0.4-3+deb13u6 | 3.0.4-3+deb13u6 |
 rpm rhel6 | | - | - |
rpm rhel7 | | - | - |
rpm rhel8 | | - | - |
rpm rhel9 | | - | - |
debian 12 | | =2.10.34-1 || =2.10.34-1+deb12u1 || =2.10.34-1+deb12u2 || =2.10.34-1+deb12u3 || =2.10.34-1+deb12u4 || =2.10.34-1+deb12u5 || =2.10.34-1+deb12u6 || =2.10.34-1+deb12u7 || >=0 <2.10.34-1+deb12u8 | 2.10.34-1+deb12u8 |
debian 14 | | =3.0.4-3 || =3.0.4-4 || =3.0.4-5 || =3.0.4-6 || =3.0.4-6.1 || =3.0.4-6.2 || =3.0.6-1 || =3.2.0~rc2-1 || =3.2.0~rc2-2 || =3.2.0~rc2-3 || =3.2.0~rc2-3.1 || >=0 <3.2.0~rc2-3.2 | 3.2.0~rc2-3.2 |
