CVE-2012-3481: Integer Overflow
Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted height and len properties in a GIF image file, which triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
Other sources
Integer overflow, leading to heap-based buffer overflow flaw was found in the GIMP's GIF (Graphics Interchange Format) image file plug-in. An attacker could create a specially-crafted GIF image file that, when opened, could cause the GIF plug-in to crash or, potentially, execute arbitrary code with the privileges of the user running the GIMP.
Acknowledgements:
Red Hat would like to thank Matthias Weckbecker of the SUSE Security Team for reporting this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3481?
CVE-2012-3481 has a high severity rating due to its potential to cause application crashes and remote code execution.
How do I fix CVE-2012-3481?
To fix CVE-2012-3481, upgrade to GIMP version 2.8.1 or later to mitigate the vulnerability.
Which versions of GIMP are affected by CVE-2012-3481?
CVE-2012-3481 affects GIMP versions 2.8.0 and earlier.
What type of attack does CVE-2012-3481 enable?
CVE-2012-3481 enables denial of service attacks and possibly allows remote code execution.
What component of GIMP is vulnerable in CVE-2012-3481?
The vulnerability in CVE-2012-3481 is located in the ReadImage function of the GIF image format plug-in.