Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Gimp XCF_load_vector函数栈溢出漏洞
Vulnerability Description
GIMP(GNU Image Manipulation Program,GNU图像处理程序)是GIMP团队开发的一套跨平台的开源图像处理软件。该软件能够实现多种图像处理,包括照片润饰、图像合成和图像创建等。 GIMP的xcf_load_vector()函数在加载XCF文件时存在栈溢出漏洞,攻击者可能利用此漏洞诱使用户打开恶意文件在用户机器上执行任意指令。 恶意攻击者可以将很大的数字写入到XCF文件的num_axes字段位置,如果用户打开了该文件就会用文件中的数据覆盖部分栈缓冲区。在little-endia
CVSS Information
N/A
Vulnerability Type
N/A