RHSA-2011:0839: Moderate: gimp security update
The GIMP (GNU Image Manipulation Program) is an image composition andediting program.A heap-based buffer overflow flaw was found in the GIMP's Paint Shop Pro(PSP) image file plug-in. An attacker could create a specially-crafted PSPimage file that, when opened, could cause the PSP plug-in to crash or,potentially, execute arbitrary code with the privileges of the user runningthe GIMP. (CVE-2010-4543)A stack-based buffer overflow flaw was found in the GIMP's Lightning,Sphere Designer, and Gfig image filters. An attacker could create aspecially-crafted Lightning, Sphere Designer, or Gfig filter configurationfile that, when opened, could cause the relevant plug-in to crash or,potentially, execute arbitrary code with the privileges of the user runningthe GIMP. (CVE-2010-4540, CVE-2010-4541, CVE-2010-4542)Users of the GIMP are advised to upgrade to these updated packages, whichcontain backported patches to correct these issues. The GIMP must berestarted for the update to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2011:0839?
The severity of RHSA-2011:0839 is classified as important due to the potential for a heap-based buffer overflow.
How do I fix RHSA-2011:0839?
To mitigate RHSA-2011:0839, upgrade to the fixed version 2.6.9-4.el6_1.1 of the affected packages provided by Red Hat.
Which software is affected by RHSA-2011:0839?
The affected software for RHSA-2011:0839 includes GIMP and its related packages such as gimp-devel and gimp-libs.
What type of vulnerability is described in RHSA-2011:0839?
RHSA-2011:0839 describes a heap-based buffer overflow flaw in the GIMP's Paint Shop Pro image file plug-in.
Can exploiting RHSA-2011:0839 lead to remote code execution?
Exploiting RHSA-2011:0839 could potentially allow an attacker to execute arbitrary code remotely by using a specially crafted image file.