CVE-2010-4541

Gimp: Stack-based buffer overflow in SphereDesigner plug-in

Severity Score

9.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long "Number of lights" field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself.

Hay un desbordamiento del búfer en la región stack de la memoria en la función loadit en el archivo plug-ins/common/sphere-designer.c en el plugin SPHERE DESIGNER en GIMP versión 2.6.11 permite a los atacantes remotos asistidos por el usuario generar una denegación de servicio (bloqueo de la aplicación) o posiblemente ejecutar código arbitrario por medio de un largo campo "Number of Lights" en un archivo de configuración del plugin. NOTA: puede ser poco común obtener un archivo de configuración de un GIMP plugin de una fuente no confiable que sea independiente de la distribución del plugin en sí.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

Attack Vector

Network

Attack Complexity

High

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2010-12-09 CVE Reserved
2011-01-07 CVE Published
2023-11-08 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-121: Stack-based Buffer Overflow
CWE-787: Out-of-bounds Write

CAPEC

References (20)

URL	Tag	Source
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608497	Third Party Advisory
http://openwall.com/lists/oss-security/2011/01/03/2	Mailing List
http://openwall.com/lists/oss-security/2011/01/04/7	Mailing List
http://osvdb.org/70281	Broken Link
http://secunia.com/advisories/42771	Broken Link
http://secunia.com/advisories/44750	Broken Link
http://secunia.com/advisories/48236	Broken Link
http://secunia.com/advisories/50737	Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=666793	Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/64581	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html	2023-11-07
http://security.gentoo.org/glsa/glsa-201209-23.xml	2023-11-07
http://www.debian.org/security/2012/dsa-2426	2023-11-07
http://www.mandriva.com/security/advisories?name=MDVSA-2011:103	2023-11-07
http://www.redhat.com/support/errata/RHSA-2011-0837.html	2023-11-07
http://www.redhat.com/support/errata/RHSA-2011-0838.html	2023-11-07
http://www.redhat.com/support/errata/RHSA-2011-0839.html	2023-11-07
http://www.vupen.com/english/advisories/2011/0016	2023-11-07
https://access.redhat.com/security/cve/CVE-2010-4541	2011-05-31
https://bugzilla.redhat.com/show_bug.cgi?id=703403	2011-05-31

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Gimp Search vendor "Gimp"		Gimp Search vendor "Gimp" for product "Gimp"				2.6.11 Search vendor "Gimp" for product "Gimp" and version "2.6.11"		-		Affected