Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-4994

Опубликовано: 12 июл. 2016
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.8
CVSS3: 7.8

Описание

Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file.

РелизСтатусПримечание
devel

released

2.8.16-1ubuntu3
esm-apps/xenial

released

2.8.16-1ubuntu1.1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [2.8.10-0ubuntu1.1]]
precise

released

2.6.12-1ubuntu1.4
trusty

released

2.8.10-0ubuntu1.1
trusty/esm

DNE

trusty was released [2.8.10-0ubuntu1.1]
upstream

needed

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

wily

released

2.8.14-1ubuntu2.1

Показывать по

EPSS

Процентиль: 70%
0.00639
Низкий

6.8 Medium

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 2.5
redhat
около 9 лет назад

Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file.

CVSS3: 7.8
nvd
около 9 лет назад

Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file.

CVSS3: 7.8
debian
около 9 лет назад

Use-after-free vulnerability in the xcf_load_image function in app/xcf ...

suse-cvrf
около 9 лет назад

Security update for gimp

suse-cvrf
около 9 лет назад

Security update for gimp

EPSS

Процентиль: 70%
0.00639
Низкий

6.8 Medium

CVSS2

7.8 High

CVSS3