REDHAT-BUG-847303: Buffer Overflow

Published Aug 10, 2012
·
Updated

Integer overflow, leading to heap-based buffer overflow flaw was found in the GIMP's GIF (Graphics Interchange Format) image file plug-in. An attacker could create a specially-crafted GIF image file that, when opened, could cause the GIF plug-in to crash or, potentially, execute arbitrary code with the privileges of the user running the GIMP.

Acknowledgements:

Red Hat would like to thank Matthias Weckbecker of the SUSE Security Team for reporting this issue.

Affected Software

1 affected component
GIMP GIF plug-in

Event History

Aug 10, 2012
Data Sourced
01:52 PM
DescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of REDHAT-BUG-847303?

The severity of REDHAT-BUG-847303 is high due to its potential to cause a heap-based buffer overflow and arbitrary code execution.

2

How do I fix REDHAT-BUG-847303?

To fix REDHAT-BUG-847303, update the GIMP GIF plug-in to the latest version that includes the patch addressing this vulnerability.

3

What impact does REDHAT-BUG-847303 have on systems?

REDHAT-BUG-847303 can lead to application crashes and potentially allow attackers to execute arbitrary code on affected systems.

4

Which software is affected by REDHAT-BUG-847303?

REDHAT-BUG-847303 affects the GIMP GIF plug-in specifically.

5

What type of flaw is found in REDHAT-BUG-847303?

The flaw in REDHAT-BUG-847303 is an integer overflow that can result in heap-based buffer overflow.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203