CVE-2012-3402: Buffer Overflow
A heap-based buffer overflow flaw was found in the way Adobe Photoshop(tm) PSD plug-in of Gimp, the GNU Image Manipulation Program, performed decoding of headers, when loading certain Adobe Photoshop image files. A remote attacker could provide a specially-crafted PSD image file that, when opened in Gimp would lead to PSD plug-in crash or, potentially, arbitrary code execution with the privileges of the user running gimp executable.
This issue was found by Jan Lieskovsky of the Red Hat Security Response Team
Other sources
Integer overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP 2.2.13 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted channels header value in a PSD image file, which triggers a heap-based buffer overflow, a different vulnerability than CVE-2009-3909.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3402?
CVE-2012-3402 is classified as a high severity vulnerability due to its ability to cause a heap-based buffer overflow.
How do I fix CVE-2012-3402?
To mitigate CVE-2012-3402, users should upgrade to a version of GIMP later than 2.2.13.
What software is affected by CVE-2012-3402?
CVE-2012-3402 affects GIMP versions up to and including 2.2.13.
What type of attacks can be executed using CVE-2012-3402?
An attacker can exploit CVE-2012-3402 by crafting a malicious PSD file that can overflow the heap and potentially execute arbitrary code.
What is the nature of the vulnerability in CVE-2012-3402?
CVE-2012-3402 is a heap-based buffer overflow flaw found in the Adobe Photoshop PSD plug-in for GIMP.