CVE-2010-4540: Buffer Overflow
Several stack-based buffer overflows were found in the way gimp processes plug-in configuration files. An attacker could create a a specially-crafted plug-in configuration file and trick the local, unsuspecting user into opening it, which could lead to gimp to crash the plugin or, potentially , arbitrary code execution with the privileges of the user running the executable.
Reference: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608497
Public PoC: http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=5;filename=gimp-overflows-poc-in-cobol.cob;att=1;bug=608497
Flaw severity note: On systems with compile time buffer checks (FORTIFYSOURCE) feature enabled, the impact of this flaw is mitigated to be only crash.
Other sources
Stack-based buffer overflow in the loadpresetresponse function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Position field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2010-4540?
CVE-2010-4540 is considered a high-severity vulnerability due to its potential for arbitrary code execution and denial of service.
How do I fix CVE-2010-4540?
To fix CVE-2010-4540, update GIMP to versions 2.6.12 or later where the vulnerability has been addressed.
Which versions of GIMP are affected by CVE-2010-4540?
GIMP version 2.6.11 is specifically affected by CVE-2010-4540.
Can CVE-2010-4540 be exploited remotely?
Yes, CVE-2010-4540 can be exploited remotely if the user opens a specially crafted file.
What types of attacks can CVE-2010-4540 enable?
CVE-2010-4540 can enable denial of service attacks or potential arbitrary code execution.