CVE-2009-1570: Integer Overflow
Published Nov 13, 2009
·Updated
Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.
Affected Software
1 affected component
GIMP=2.6.7
Remediation
Patch Available
Event History
Nov 13, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1570?
CVE-2009-1570 has a critical severity level due to its potential for remote code execution.
2
How do I fix CVE-2009-1570?
To fix CVE-2009-1570, upgrade GIMP to a version that addresses this vulnerability.
3
What systems are affected by CVE-2009-1570?
CVE-2009-1570 specifically affects GIMP version 2.6.7.
4
What kind of attack is possible with CVE-2009-1570?
CVE-2009-1570 allows remote attackers to execute arbitrary code through crafted BMP files.
5
In which function is CVE-2009-1570 found?
CVE-2009-1570 is found in the ReadImage function within the bmp-read.c file of GIMP.