CVE-2007-2949

Published: Jul 4, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.

Affected (4)

Products: Gimp: Gimp · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gimp Gimp	Up to 2.2.15

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10
Canonical Ubuntu Linux	Version 7.04

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (60)

http://issues.foresightlinux.org/browse/FL-457

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://osvdb.org/37804

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://secunia.com/advisories/25677

Source: PSIRT-CNA@flexerasoftware.com

Broken LinkPatch

http://secunia.com/advisories/25949

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://secunia.com/advisories/26044

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://secunia.com/advisories/26132

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://secunia.com/advisories/26215

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://secunia.com/advisories/26384

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://secunia.com/advisories/26575

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://secunia.com/advisories/26939

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://secunia.com/advisories/28114

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://secunia.com/secunia_research/2007-63/advisory/

Source: PSIRT-CNA@flexerasoftware.com

Broken LinkPatchVendor Advisory

http://security.gentoo.org/glsa/glsa-200707-09.xml

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201320-1

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://svn.gnome.org/viewcvs/gimp?view=revision&revision=22798

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.debian.org/security/2007/dsa-1335

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

http://www.kb.cert.org/vuls/id/399896

Source: PSIRT-CNA@flexerasoftware.com

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2007:170

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://www.novell.com/linux/security/advisories/2007_15_sr.html

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2007-0513.html

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://www.securityfocus.com/bid/24745

Source: PSIRT-CNA@flexerasoftware.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.360191

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

http://www.ubuntu.com/usn/usn-480-1

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

http://www.vupen.com/english/advisories/2007/2421

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://www.vupen.com/english/advisories/2007/4241

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/35246

Source: PSIRT-CNA@flexerasoftware.com

Third Party AdvisoryVDB Entry

https://issues.rpath.com/browse/RPL-1487

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11276

Source: PSIRT-CNA@flexerasoftware.com

Tool Signature

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5772

Source: PSIRT-CNA@flexerasoftware.com

Tool Signature

http://issues.foresightlinux.org/browse/FL-457