CVE-2012-3481

Publication date 25 August 2012

Last updated 24 July 2024

Ubuntu priority

Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted height and len properties in a GIF image file, which triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.

Read the notes from the security team

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
gimp	12.04 LTS precise	Fixed 2.6.12-1ubuntu1.1
	11.10 oneiric	Fixed 2.6.11-2ubuntu4.1
	11.04 natty	Fixed 2.6.11-1ubuntu6.3
	10.04 LTS lucid	Fixed 2.6.8-2ubuntu1.5
	8.04 LTS hardy	Ignored end of life

Notes

sbeattie

a claimed reproducer in the novell bugzilla

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
gimp	Upstream: plug-in Upstream: plug-in

References

Related Ubuntu Security Notices (USN)