CVE-2009-3909: Buffer Overflow
Published Nov 19, 2009
·Updated
Integer overflow in the readchanneldata function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a crafted PSD file that triggers a heap-based buffer overflow.
Affected Software
1 affected component
GIMP=2.6.7
Remediation
Event History
Nov 19, 2009
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-3909?
CVE-2009-3909 is considered a high severity vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2009-3909?
To fix CVE-2009-3909, upgrade to GIMP version 2.6.8 or later where the vulnerability has been addressed.
3
What type of attack is possible with CVE-2009-3909?
CVE-2009-3909 allows remote attackers to execute arbitrary code via a crafted PSD file.
4
What software is affected by CVE-2009-3909?
CVE-2009-3909 affects GIMP version 2.6.7.
5
What function is vulnerable in CVE-2009-3909?
The integer overflow vulnerability occurs in the read_channel_data function within GIMP's psd-load.c file.