Description
A flaw was found in GIMP's PSP (Paint Shop Pro) file parser. A remote attacker could exploit an integer overflow vulnerability in the read_creator_block() function by providing a specially crafted PSP image file. This vulnerability occurs when a 32-bit length value from the file is used for memory allocation without proper validation, leading to a heap overflow and an out-of-bounds write. Successful exploitation could result in an application level denial of service.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 13 | | =3.0.4-3 || =3.0.4-3+deb13u1 || =3.0.4-3+deb13u2 || =3.0.4-3+deb13u3 || =3.0.4-3+deb13u4 || =3.0.4-3+deb13u5 || >=0 <3.0.4-3+deb13u6 | 3.0.4-3+deb13u6 |
debian 12 | | =2.10.34-1 || =2.10.34-1+deb12u1 || =2.10.34-1+deb12u2 || =2.10.34-1+deb12u3 || =2.10.34-1+deb12u4 || =2.10.34-1+deb12u5 || =2.10.34-1+deb12u6 || =2.10.34-1+deb12u7 || >=0 <2.10.34-1+deb12u8 | 2.10.34-1+deb12u8 |
 rpm rhel6 | | - | - |
rpm rhel7 | | - | - |
rpm rhel8 | | - | - |
rpm rhel9 | | - | - |
debian 11 | | =2.10.22-4 || =2.10.22-4+deb11u1 || =2.10.22-4+deb11u2 || =2.10.22-4+deb11u3 || =2.10.22-4+deb11u4 || =2.10.22-4+deb11u5 || >=0 <2.10.22-4+deb11u6 | 2.10.22-4+deb11u6 |
debian 14 | | =3.0.4-3 || =3.0.4-4 || =3.0.4-5 || =3.0.4-6 || =3.0.4-6.1 || =3.0.4-6.2 || =3.0.6-1 || =3.2.0~rc2-1 || =3.2.0~rc2-2 || =3.2.0~rc2-3 || =3.2.0~rc2-3.1 || >=0 <3.2.0~rc2-3.2 | 3.2.0~rc2-3.2 |
