CVE-2006-4519
GIMP multiple image loader integer overflows
Severity Score
6.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.
Múltiples desbordamientos de búfer de entero en la extensión del cargador de imagen en GIMP anterior a 2.2.16 permite a atacantes remotos con la intervención del usuario ejecutar código de su elección a través de valores de longitud manipulados en archivos (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, y (7) XWD.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2006-08-31 CVE Reserved
- 2007-07-10 CVE Published
- 2024-06-20 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-190: Integer Overflow or Wraparound
CAPEC
References (29)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://security.gentoo.org/glsa/glsa-200707-09.xml | 2022-02-07 | |
| http://www.debian.org/security/2007/dsa-1335 | 2022-02-07 | |
| http://www.mandriva.com/security/advisories?name=MDKSA-2007:170 | 2022-02-07 | |
| http://www.redhat.com/support/errata/RHSA-2007-0513.html | 2022-02-07 | |
| http://www.ubuntu.com/usn/usn-494-1 | 2022-02-07 | |
| https://access.redhat.com/security/cve/CVE-2006-4519 | 2007-09-26 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=247565 | 2007-09-26 |