Red Hat Security Advisory: gimp:2.8 security update

Important

A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability within the `read_channel_data` function during PSD (Photoshop Document) file parsing by enticing a user to open a specially crafted PSD file. This could lead to arbitrary code execution in the context of the current process.

CWE-190 - Integer Overflow or Wraparound

A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient validation of user-supplied data length before copying it to a buffer, leading to potential code execution in the context of the current process.

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

A flaw was found in GIMP. This vulnerability allows a remote attacker to execute arbitrary code by tricking a user into opening a specially crafted TIF file. The issue arises from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before memory allocation. Successful exploitation could result in the attacker executing code in the context of the current process.

CWE-190 - Integer Overflow or Wraparound

A flaw was found in GIMP, an image manipulation program. This vulnerability allows a remote attacker to execute arbitrary code on an affected system. Exploitation requires user interaction, where the target must open a specially crafted TIF (Tagged Image File Format) file. The flaw occurs during TIF file parsing due to improper validation of user-supplied data, which can lead to an integer overflow and enable the attacker to run malicious code.

CWE-190 - Integer Overflow or Wraparound

A flaw was found in GIMP. This vulnerability, an integer overflow within the parsing of SGI (Silicon Graphics Image) files, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, where the target must open a specially crafted malicious SGI file. Successful exploitation could lead to the attacker executing code in the context of the current user's process.

CWE-190 - Integer Overflow or Wraparound

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary code execution in the context of the current process.

CWE-131 - Incorrect Calculation of Buffer Size

A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.

CWE-193 - Off-by-one Error