CVE-2009-1570

Published: Nov 13, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.

Affected (1)

Products: Gimp: Gimp

Gimp

1 product

Gimp

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gimp Gimp	Version 2.6.7

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (34)

http://git.gnome.org/cgit/gimp/commit/?h=gimp-2-6&id=df2b0aca2e7cdb95ebfd3454c65aaba0a83e9bbe

Source: PSIRT-CNA@flexerasoftware.com

PatchVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

http://secunia.com/advisories/37232

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://secunia.com/advisories/50737

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://secunia.com/secunia_research/2009-42/

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://security.gentoo.org/glsa/glsa-201209-23.xml

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

http://www.osvdb.org/59930

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2011-0837.html

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2011-0838.html

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://www.securityfocus.com/archive/1/507813/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/37006

Source: PSIRT-CNA@flexerasoftware.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2009/3228

Source: PSIRT-CNA@flexerasoftware.com

Broken LinkPatch

http://www.vupen.com/english/advisories/2009/3564

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

http://www.vupen.com/english/advisories/2010/1021

Source: PSIRT-CNA@flexerasoftware.com

Broken Link

https://bugzilla.gnome.org/show_bug.cgi?id=600484

Source: PSIRT-CNA@flexerasoftware.com

Issue TrackingThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/54254

Source: PSIRT-CNA@flexerasoftware.com

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8290

Source: PSIRT-CNA@flexerasoftware.com

Tool Signature

http://git.gnome.org/cgit/gimp/commit/?h=gimp-2-6&id=df2b0aca2e7cdb95ebfd3454c65aaba0a83e9bbe