
CVE-2006-3404
https://notcve.org/view.php?id=CVE-2006-3404
06 Jul 2006 — Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property. Un desbordamiento de búfer en la función xcf_load_vector en app/xcf/xcf-load.c para versiones de gimp anteriores a la 2.2.12 permite provocar una denegación de servicio a atacantes con la ayuda de usuarios locales provocando asimismo una caída de... • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=377049 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •

CVE-2005-0654
https://notcve.org/view.php?id=CVE-2005-0654
07 Mar 2005 — gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) via the image descriptor (1) height or (2) width fields set to zero. • http://marc.info/?l=bugtraq&m=110995346018830&w=2 •