Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-4994

Опубликовано: 12 июл. 2016
Источник: debian
EPSS Низкий

Описание

Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
gimpfixed2.8.16-2.2package

Примечания

  • https://bugzilla.gnome.org/show_bug.cgi?id=767873

EPSS

Процентиль: 70%
0.00639
Низкий

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 9 лет назад

Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file.

CVSS3: 2.5
redhat
около 9 лет назад

Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file.

CVSS3: 7.8
nvd
около 9 лет назад

Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file.

suse-cvrf
около 9 лет назад

Security update for gimp

suse-cvrf
около 9 лет назад

Security update for gimp

EPSS

Процентиль: 70%
0.00639
Низкий