CVE-2013-1913: Integer Overflow
Integer overflow in the loadimage function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large color entries value in an X Window System (XWD) image dump.
Other sources
Murray McAllister of the Red Hat Security Response Team has discovered an integer overflow in the way GIMP, the GNU Image Manipulation Program, performed loading of certain X Window System (XWD) image dumps containing large a color entries value. A remote attacker could provide a specially-crafted XWD format image file that, when processed, would lead to gimp XWD plug-in crash or, potentially, arbitrary code execution with the privileges of the user running the gimp executable.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1913?
The severity of CVE-2013-1913 is considered critical as it can lead to denial of service and potential arbitrary code execution.
How do I fix CVE-2013-1913?
To fix CVE-2013-1913, update GIMP to version 2.6.10 or later and ensure that GLib is updated to an appropriate version.
What versions of GIMP are affected by CVE-2013-1913?
GIMP versions 2.6.9 and earlier are affected by CVE-2013-1913.
Can CVE-2013-1913 be exploited remotely?
Yes, CVE-2013-1913 can be exploited remotely by attackers to crash the application or potentially execute arbitrary code.
Which operating systems are impacted by CVE-2013-1913?
CVE-2013-1913 impacts Red Hat Enterprise Linux versions 5.0 and 6.0 among others.