National Cyber Awareness System

Vulnerability Summary for CVE-2010-4540

Overview

Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Position field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. NOTE: some of these details are obtained from third party information.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=666793

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=666793

External Source: XF

Name: gimp-lightning-effects-bo(64582)

Hyperlink:http://xforce.iss.net/xforce/xfdb/64582

External Source: VUPEN

Name: ADV-2011-0016

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2011/0016

External Source: REDHAT

Name: RHSA-2011:0839

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2011-0839.html

External Source: REDHAT

Name: RHSA-2011:0838

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2011-0838.html

External Source: MANDRIVA

Name: MDVSA-2011:103

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2011:103

External Source: GENTOO

Name: GLSA-201209-23

Hyperlink:http://security.gentoo.org/glsa/glsa-201209-23.xml

External Source: SECUNIA

Name: 50737

Hyperlink:http://secunia.com/advisories/50737

External Source: SECUNIA

Name: 44750

Type: Advisory

Hyperlink:http://secunia.com/advisories/44750

External Source: SECUNIA

Name: 42771

Type: Advisory

Hyperlink:http://secunia.com/advisories/42771

External Source: OSVDB

Name: 70282

Hyperlink:http://osvdb.org/70282

External Source: MLIST

Name: [oss-security] 20110104 Re: CVE request for buffer overflows in gimp

Hyperlink:http://openwall.com/lists/oss-security/2011/01/04/7

External Source: MLIST

Name: [oss-security] 20110103 CVE request for buffer overflows in gimp

Hyperlink:http://openwall.com/lists/oss-security/2011/01/03/2

External Source: MISC

Name: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608497

Hyperlink:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608497