CVE-2011-1782

Publication date 8 June 2011

Last updated 24 July 2024

Ubuntu priority

Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4543.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
gimp	11.04 natty	Fixed 2.6.11-1ubuntu6.1
	10.10 maverick	Fixed 2.6.10-1ubuntu3.3
	10.04 LTS lucid	Fixed 2.6.8-2ubuntu1.3
	8.04 LTS hardy	Ignored end of life

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
gimp	Upstream: http://git.gnome.org/browse/gimp/commit?id=f657361db04de69ce003328724c59e3f942d7d15

CVE-2011-1782

Status

Patch details

References

Related Ubuntu Security Notices (USN)

Other references