CVE-2006-3404

Published: Jul 6, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property.

Affected (1)

Products: Gimp: Gimp

Gimp

1 product

Gimp

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gimp Gimp	Before 2.2.12

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (62)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=377049

Source: cve@mitre.org

Third Party Advisory

http://bugzilla.gnome.org/show_bug.cgi?id=346742

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://secunia.com/advisories/20976

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/20979

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/21069

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/21104

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/21170

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/21182

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/21198

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/21459

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/23044

Source: cve@mitre.org

Broken Link

http://security.gentoo.org/glsa/glsa-200607-08.xml

Source: cve@mitre.org

Third Party Advisory

http://securitytracker.com/id?1016527

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102720-1

Source: cve@mitre.org

Broken Link

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200070-1

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2006/dsa-1116

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2006:127

Source: cve@mitre.org

Broken Link

http://www.novell.com/linux/security/advisories/2006_19_sr.html

Source: cve@mitre.org

Broken Link

http://www.osvdb.org/27037

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2006-0598.html

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/archive/1/440987/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/441012/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/441030/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/18877

Source: cve@mitre.org

Broken LinkPatchThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-312-1

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2006/2703

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2006/4634

Source: cve@mitre.org

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/27687

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://issues.rpath.com/browse/RPL-522

Source: cve@mitre.org

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11259

Source: cve@mitre.org

Tool Signature

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5908

Source: cve@mitre.org

Tool Signature

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=377049