Логотип exploitDog
bind:"CVE-2023-44441" OR bind:"CVE-2023-44442" OR bind:"CVE-2023-44443" OR bind:"CVE-2023-44444"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2023-44441" OR bind:"CVE-2023-44442" OR bind:"CVE-2023-44443" OR bind:"CVE-2023-44444"

Количество 34

Количество 34

fstec логотип

BDU:2024-06921

около 2 лет назад

Уязвимость графического редактора GIMP, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 7.8
EPSS: Средний
ubuntu логотип

CVE-2023-44443

больше 1 года назад

GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22096.

CVSS3: 7.8
EPSS: Средний
redhat логотип

CVE-2023-44443

почти 2 года назад

GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22096.

CVSS3: 7.8
EPSS: Средний
nvd логотип

CVE-2023-44443

больше 1 года назад

GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22096.

CVSS3: 7.8
EPSS: Средний
debian логотип

CVE-2023-44443

больше 1 года назад

GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerabi ...

CVSS3: 7.8
EPSS: Средний
ubuntu логотип

CVE-2023-44444

больше 1 года назад

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. Crafted data in a PSP file can trigger an off-by-one error when calculating a location to write within a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22097.

CVSS3: 7.8
EPSS: Средний
redhat логотип

CVE-2023-44444

почти 2 года назад

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. Crafted data in a PSP file can trigger an off-by-one error when calculating a location to write within a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22097.

CVSS3: 7.8
EPSS: Средний
nvd логотип

CVE-2023-44444

больше 1 года назад

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. Crafted data in a PSP file can trigger an off-by-one error when calculating a location to write within a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22097.

CVSS3: 7.8
EPSS: Средний
debian логотип

CVE-2023-44444

больше 1 года назад

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. ...

CVSS3: 7.8
EPSS: Средний
github логотип

GHSA-q58r-wxw5-2g3g

больше 1 года назад

GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22096.

CVSS3: 7.8
EPSS: Средний
fstec логотип

BDU:2023-08306

почти 2 года назад

Уязвимость графического редактора GIMP, связанная с целочисленным переполнением, позволяющая нарушиелю выполнить произвольный код

CVSS3: 7.8
EPSS: Средний
github логотип

GHSA-w7g8-vmhg-qvwm

больше 1 года назад

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. Crafted data in a PSP file can trigger an off-by-one error when calculating a location to write within a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22097.

CVSS3: 7.8
EPSS: Средний
fstec логотип

BDU:2023-08259

около 2 лет назад

Уязвимость парсера PSP-файлов графического редактора GIMP, позволяющая нарушителю выполнить произвольный код

CVSS3: 7.8
EPSS: Средний
redos логотип

ROS-20240603-01

больше 1 года назад

Уязвимость GIMP

CVSS3: 7.8
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2024-06921

Уязвимость графического редактора GIMP, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 7.8
60%
Средний
около 2 лет назад
ubuntu логотип
CVE-2023-44443

GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22096.

CVSS3: 7.8
65%
Средний
больше 1 года назад
redhat логотип
CVE-2023-44443

GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22096.

CVSS3: 7.8
65%
Средний
почти 2 года назад
nvd логотип
CVE-2023-44443

GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22096.

CVSS3: 7.8
65%
Средний
больше 1 года назад
debian логотип
CVE-2023-44443

GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerabi ...

CVSS3: 7.8
65%
Средний
больше 1 года назад
ubuntu логотип
CVE-2023-44444

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. Crafted data in a PSP file can trigger an off-by-one error when calculating a location to write within a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22097.

CVSS3: 7.8
51%
Средний
больше 1 года назад
redhat логотип
CVE-2023-44444

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. Crafted data in a PSP file can trigger an off-by-one error when calculating a location to write within a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22097.

CVSS3: 7.8
51%
Средний
почти 2 года назад
nvd логотип
CVE-2023-44444

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. Crafted data in a PSP file can trigger an off-by-one error when calculating a location to write within a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22097.

CVSS3: 7.8
51%
Средний
больше 1 года назад
debian логотип
CVE-2023-44444

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. ...

CVSS3: 7.8
51%
Средний
больше 1 года назад
github логотип
GHSA-q58r-wxw5-2g3g

GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22096.

CVSS3: 7.8
65%
Средний
больше 1 года назад
fstec логотип
BDU:2023-08306

Уязвимость графического редактора GIMP, связанная с целочисленным переполнением, позволяющая нарушиелю выполнить произвольный код

CVSS3: 7.8
65%
Средний
почти 2 года назад
github логотип
GHSA-w7g8-vmhg-qvwm

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. Crafted data in a PSP file can trigger an off-by-one error when calculating a location to write within a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22097.

CVSS3: 7.8
51%
Средний
больше 1 года назад
fstec логотип
BDU:2023-08259

Уязвимость парсера PSP-файлов графического редактора GIMP, позволяющая нарушителю выполнить произвольный код

CVSS3: 7.8
51%
Средний
около 2 лет назад
redos логотип
ROS-20240603-01

Уязвимость GIMP

CVSS3: 7.8
51%
Средний
больше 1 года назад

Уязвимостей на страницу