{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated gimp packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 4.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "The GIMP (GNU Image Manipulation Program) is an image composition and\nediting program.\n\nAn integer overflow flaw, leading to a heap-based buffer overflow, was\nfound in the GIMP's Microsoft Windows Bitmap (BMP) and Personal Computer\neXchange (PCX) image file plug-ins. An attacker could create a\nspecially-crafted BMP or PCX image file that, when opened, could cause the\nrelevant plug-in to crash or, potentially, execute arbitrary code with the\nprivileges of the user running the GIMP. (CVE-2009-1570, CVE-2011-1178)\n\nA heap-based buffer overflow flaw was found in the GIMP's Paint Shop Pro\n(PSP) image file plug-in. An attacker could create a specially-crafted PSP\nimage file that, when opened, could cause the PSP plug-in to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nthe GIMP. (CVE-2010-4543)\n\nA stack-based buffer overflow flaw was found in the GIMP's Sphere Designer\nimage filter. An attacker could create a specially-crafted Sphere Designer\nfilter configuration file that, when opened, could cause the Sphere\nDesigner plug-in to crash or, potentially, execute arbitrary code with the\nprivileges of the user running the GIMP. (CVE-2010-4541)\n\nRed Hat would like to thank Stefan Cornelius of Secunia Research for\nresponsibly reporting the CVE-2009-1570 flaw.\n\nUsers of the GIMP are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues. The GIMP must be\nrestarted for the update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2011:0837", "url": "https://access.redhat.com/errata/RHSA-2011:0837" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "537356", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=537356" }, { "category": "external", "summary": "689831", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=689831" }, { "category": "external", "summary": "703403", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=703403" }, { "category": "external", "summary": "703407", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=703407" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0837.json" } ], "title": "Red Hat Security Advisory: gimp security update", "tracking": { "current_release_date": "2025-11-21T17:38:16+00:00", "generator": { "date": "2025-11-21T17:38:16+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.12" } }, "id": "RHSA-2011:0837", "initial_release_date": "2011-05-31T13:59:00+00:00", "revision_history": [ { "date": "2011-05-31T13:59:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2011-05-31T10:05:24+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-11-21T17:38:16+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AS version 4", "product": { "name": "Red Hat Enterprise Linux AS version 4", "product_id": "4AS", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:4::as" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop version 4", "product": { "name": "Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ES version 4", "product": { "name": "Red Hat Enterprise Linux ES version 4", "product_id": "4ES", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:4::es" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux WS version 4", "product": { "name": "Red Hat Enterprise Linux WS version 4", "product_id": "4WS", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:4::ws" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "product": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "product_id": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp-debuginfo@2.0.5-7.0.7.el4.1?arch=ia64&epoch=1" } } }, { "category": "product_version", "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "product": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "product_id": "gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp-devel@2.0.5-7.0.7.el4.1?arch=ia64&epoch=1" } } }, { "category": "product_version", "name": "gimp-1:2.0.5-7.0.7.el4.1.ia64", "product": { "name": "gimp-1:2.0.5-7.0.7.el4.1.ia64", "product_id": "gimp-1:2.0.5-7.0.7.el4.1.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp@2.0.5-7.0.7.el4.1?arch=ia64&epoch=1" } } } ], "category": "architecture", "name": "ia64" }, { "branches": [ { "category": "product_version", "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "product": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "product_id": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp-debuginfo@2.0.5-7.0.7.el4.1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "product": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "product_id": "gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp-devel@2.0.5-7.0.7.el4.1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "gimp-1:2.0.5-7.0.7.el4.1.x86_64", "product": { "name": "gimp-1:2.0.5-7.0.7.el4.1.x86_64", "product_id": "gimp-1:2.0.5-7.0.7.el4.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp@2.0.5-7.0.7.el4.1?arch=x86_64&epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "product": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "product_id": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp-debuginfo@2.0.5-7.0.7.el4.1?arch=i386&epoch=1" } } }, { "category": "product_version", "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "product": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "product_id": "gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp-devel@2.0.5-7.0.7.el4.1?arch=i386&epoch=1" } } }, { "category": "product_version", "name": "gimp-1:2.0.5-7.0.7.el4.1.i386", "product": { "name": "gimp-1:2.0.5-7.0.7.el4.1.i386", "product_id": "gimp-1:2.0.5-7.0.7.el4.1.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp@2.0.5-7.0.7.el4.1?arch=i386&epoch=1" } } } ], "category": "architecture", "name": "i386" }, { "branches": [ { "category": "product_version", "name": "gimp-1:2.0.5-7.0.7.el4.1.src", "product": { "name": "gimp-1:2.0.5-7.0.7.el4.1.src", "product_id": "gimp-1:2.0.5-7.0.7.el4.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp@2.0.5-7.0.7.el4.1?arch=src&epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "product": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "product_id": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp-debuginfo@2.0.5-7.0.7.el4.1?arch=ppc&epoch=1" } } }, { "category": "product_version", "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "product": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "product_id": "gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp-devel@2.0.5-7.0.7.el4.1?arch=ppc&epoch=1" } } }, { "category": "product_version", "name": "gimp-1:2.0.5-7.0.7.el4.1.ppc", "product": { "name": "gimp-1:2.0.5-7.0.7.el4.1.ppc", "product_id": "gimp-1:2.0.5-7.0.7.el4.1.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp@2.0.5-7.0.7.el4.1?arch=ppc&epoch=1" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "product": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "product_id": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp-debuginfo@2.0.5-7.0.7.el4.1?arch=s390x&epoch=1" } } }, { "category": "product_version", "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "product": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "product_id": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp-devel@2.0.5-7.0.7.el4.1?arch=s390x&epoch=1" } } }, { "category": "product_version", "name": "gimp-1:2.0.5-7.0.7.el4.1.s390x", "product": { "name": "gimp-1:2.0.5-7.0.7.el4.1.s390x", "product_id": "gimp-1:2.0.5-7.0.7.el4.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp@2.0.5-7.0.7.el4.1?arch=s390x&epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "product": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "product_id": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp-debuginfo@2.0.5-7.0.7.el4.1?arch=s390&epoch=1" } } }, { "category": "product_version", "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "product": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "product_id": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp-devel@2.0.5-7.0.7.el4.1?arch=s390&epoch=1" } } }, { "category": "product_version", "name": "gimp-1:2.0.5-7.0.7.el4.1.s390", "product": { "name": "gimp-1:2.0.5-7.0.7.el4.1.s390", "product_id": "gimp-1:2.0.5-7.0.7.el4.1.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/gimp@2.0.5-7.0.7.el4.1?arch=s390&epoch=1" } } } ], "category": "architecture", "name": "s390" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.i386 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-1:2.0.5-7.0.7.el4.1.i386" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.i386", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.ia64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-1:2.0.5-7.0.7.el4.1.ia64" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.ia64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.ppc as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-1:2.0.5-7.0.7.el4.1.ppc" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.ppc", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.s390 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.s390", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.s390x as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390x" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.s390x", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.src as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-1:2.0.5-7.0.7.el4.1.src" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.src", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-1:2.0.5-7.0.7.el4.1.x86_64" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.x86_64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.i386 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.ia64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.ppc as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390x as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.i386" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.i386", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ia64" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.ia64", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ppc" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.ppc", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.s390", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390x" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.s390x", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.src as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.src" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.src", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.x86_64" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.x86_64", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.i386" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.i386 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-1:2.0.5-7.0.7.el4.1.i386" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.i386", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.ia64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-1:2.0.5-7.0.7.el4.1.ia64" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.ia64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.ppc as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-1:2.0.5-7.0.7.el4.1.ppc" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.ppc", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.s390 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.s390", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.s390x as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390x" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.s390x", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.src as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-1:2.0.5-7.0.7.el4.1.src" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.src", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-1:2.0.5-7.0.7.el4.1.x86_64" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.x86_64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.i386 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.i386" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.ia64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.ppc as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390x as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.i386 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-1:2.0.5-7.0.7.el4.1.i386" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.i386", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.ia64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-1:2.0.5-7.0.7.el4.1.ia64" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.ia64", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.ppc as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-1:2.0.5-7.0.7.el4.1.ppc" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.ppc", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.s390 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.s390", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.s390x as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390x" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.s390x", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.src as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-1:2.0.5-7.0.7.el4.1.src" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.src", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-1:2.0.5-7.0.7.el4.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-1:2.0.5-7.0.7.el4.1.x86_64" }, "product_reference": "gimp-1:2.0.5-7.0.7.el4.1.x86_64", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64" }, "product_reference": "gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.i386 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.ia64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.ppc as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390x as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64" }, "product_reference": "gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "relates_to_product_reference": "4WS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Stefan Cornelius" ], "organization": "Secunia Research" } ], "cve": "CVE-2009-1570", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "discovery_date": "2009-11-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "537356" } ], "notes": [ { "category": "description", "text": "Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.", "title": "Vulnerability description" }, { "category": "summary", "text": "Gimp: Integer overflow in the BMP image file plugin", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-1:2.0.5-7.0.7.el4.1.src", "4AS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.src", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-1:2.0.5-7.0.7.el4.1.src", "4ES:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-1:2.0.5-7.0.7.el4.1.src", "4WS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-1570" }, { "category": "external", "summary": "RHBZ#537356", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=537356" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1570", "url": "https://www.cve.org/CVERecord?id=CVE-2009-1570" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1570", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1570" } ], "release_date": "2009-11-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2011-05-31T13:59:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259", "product_ids": [ "4AS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-1:2.0.5-7.0.7.el4.1.src", "4AS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.src", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-1:2.0.5-7.0.7.el4.1.src", "4ES:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-1:2.0.5-7.0.7.el4.1.src", "4WS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2011:0837" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "4AS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-1:2.0.5-7.0.7.el4.1.src", "4AS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.src", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-1:2.0.5-7.0.7.el4.1.src", "4ES:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-1:2.0.5-7.0.7.el4.1.src", "4WS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Gimp: Integer overflow in the BMP image file plugin" }, { "cve": "CVE-2010-4541", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "discovery_date": "2010-12-31T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "703403" } ], "notes": [ { "category": "description", "text": "Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long \"Number of lights\" field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself.", "title": "Vulnerability description" }, { "category": "summary", "text": "Gimp: Stack-based buffer overflow in SphereDesigner plug-in", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-1:2.0.5-7.0.7.el4.1.src", "4AS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.src", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-1:2.0.5-7.0.7.el4.1.src", "4ES:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-1:2.0.5-7.0.7.el4.1.src", "4WS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-4541" }, { "category": "external", "summary": "RHBZ#703403", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=703403" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-4541", "url": "https://www.cve.org/CVERecord?id=CVE-2010-4541" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-4541", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-4541" } ], "release_date": "2010-12-31T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2011-05-31T13:59:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259", "product_ids": [ "4AS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-1:2.0.5-7.0.7.el4.1.src", "4AS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.src", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-1:2.0.5-7.0.7.el4.1.src", "4ES:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-1:2.0.5-7.0.7.el4.1.src", "4WS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2011:0837" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "4AS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-1:2.0.5-7.0.7.el4.1.src", "4AS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.src", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-1:2.0.5-7.0.7.el4.1.src", "4ES:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-1:2.0.5-7.0.7.el4.1.src", "4WS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Gimp: Stack-based buffer overflow in SphereDesigner plug-in" }, { "cve": "CVE-2010-4543", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2010-12-31T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "703407" } ], "notes": [ { "category": "description", "text": "Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image. NOTE: some of these details are obtained from third party information.", "title": "Vulnerability description" }, { "category": "summary", "text": "Gimp: Heap-based buffer overflow in Paint Shop Pro (PSP) plug-in", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-1:2.0.5-7.0.7.el4.1.src", "4AS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.src", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-1:2.0.5-7.0.7.el4.1.src", "4ES:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-1:2.0.5-7.0.7.el4.1.src", "4WS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-4543" }, { "category": "external", "summary": "RHBZ#703407", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=703407" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-4543", "url": "https://www.cve.org/CVERecord?id=CVE-2010-4543" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-4543", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-4543" } ], "release_date": "2010-12-31T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2011-05-31T13:59:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259", "product_ids": [ "4AS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-1:2.0.5-7.0.7.el4.1.src", "4AS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.src", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-1:2.0.5-7.0.7.el4.1.src", "4ES:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-1:2.0.5-7.0.7.el4.1.src", "4WS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2011:0837" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "4AS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-1:2.0.5-7.0.7.el4.1.src", "4AS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.src", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-1:2.0.5-7.0.7.el4.1.src", "4ES:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-1:2.0.5-7.0.7.el4.1.src", "4WS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Gimp: Heap-based buffer overflow in Paint Shop Pro (PSP) plug-in" }, { "cve": "CVE-2011-1178", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "discovery_date": "2011-03-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "689831" } ], "notes": [ { "category": "description", "text": "Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PCX image that triggers a heap-based buffer overflow.", "title": "Vulnerability description" }, { "category": "summary", "text": "Gimp: Integer overflow in the PCX image file plug-in", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-1:2.0.5-7.0.7.el4.1.src", "4AS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.src", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-1:2.0.5-7.0.7.el4.1.src", "4ES:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-1:2.0.5-7.0.7.el4.1.src", "4WS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2011-1178" }, { "category": "external", "summary": "RHBZ#689831", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=689831" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2011-1178", "url": "https://www.cve.org/CVERecord?id=CVE-2011-1178" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1178", "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1178" } ], "release_date": "2011-05-23T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2011-05-31T13:59:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259", "product_ids": [ "4AS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-1:2.0.5-7.0.7.el4.1.src", "4AS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.src", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-1:2.0.5-7.0.7.el4.1.src", "4ES:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-1:2.0.5-7.0.7.el4.1.src", "4WS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2011:0837" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "4AS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-1:2.0.5-7.0.7.el4.1.src", "4AS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4AS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.src", "4Desktop:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4Desktop:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-1:2.0.5-7.0.7.el4.1.src", "4ES:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4ES:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-1:2.0.5-7.0.7.el4.1.src", "4WS:gimp-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-debuginfo-1:2.0.5-7.0.7.el4.1.x86_64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.i386", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ia64", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.ppc", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.s390x", "4WS:gimp-devel-1:2.0.5-7.0.7.el4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Gimp: Integer overflow in the PCX image file plug-in" } ] }