Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed XTENSION header of a .fit file, as demonstrated using a long string.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GIMP ‘fit’文件格式拒绝服务漏洞
Vulnerability Description
GIMP(GNU Image Manipulation Program,GNU图像处理程序)是GIMP团队开发的一套跨平台的开源图像处理软件。该软件能够实现多种图像处理,包括照片润饰、图像合成和图像创建等。 GIMP 2.8.1之前版本中的fits-io.c在处理部分FIT格式文件时存在拒绝服务漏洞。攻击者可利用该漏洞通过提供包含特制'XTENSION'头的FIT格式文件,诱使应用程序处理,可导致gimp崩溃。
CVSS Information
N/A
Vulnerability Type
N/A