CVE-2012-4245: Medium severity gimp vulnerability
Published Aug 31, 2012
·Updated
The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via the python-fu-eval command.
Affected Software
1 affected component
GIMP>=2.6.0<=2.6.13
Event History
Aug 31, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4245?
CVE-2012-4245 has a high severity level due to its ability to allow remote attackers to execute arbitrary commands without authentication.
2
How do I fix CVE-2012-4245?
To fix CVE-2012-4245, update GIMP to version 2.6.14 or later, which addresses this vulnerability.
3
Which versions of GIMP are affected by CVE-2012-4245?
CVE-2012-4245 affects GIMP versions from 2.6.0 to 2.6.13 inclusive.
4
What type of vulnerability is CVE-2012-4245?
CVE-2012-4245 is a remote code execution vulnerability due to lack of authentication in the scriptfu network server.
5
Can CVE-2012-4245 be exploited remotely?
Yes, CVE-2012-4245 can be exploited remotely, allowing attackers to execute commands without needing authentication.