NVD Vulnerability Detail

CVE-2011-1178

Summary	Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PCX image that triggers a heap-based buffer overflow.
Publication Date	June 7, 2011, 4:55 a.m.
Registration Date	Jan. 28, 2021, 4:38 p.m.
Last Update	Nov. 21, 2024, 10:25 a.m.

CVSS2.0 : MEDIUM
Score	6.8
Vector	AV:N/AC:M/Au:N/C:P/I:P/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:gimp:gimp::::::::			2.7.0

Related information, measures and tools

No	URL	タグ
1	http://git.gnome.org/browse/gimp/commit/?id=a9671395f6573e90316a9d748588c5435216f6ce	Patch Third Party Advisory
2	http://secunia.com/advisories/50737	Broken Link
3	http://security.gentoo.org/glsa/glsa-201209-23.xml	Third Party Advisory
4	http://securitytracker.com/id?1025586	Broken Link Third Party Advisory VDB Entry
5	http://www.mandriva.com/security/advisories?name=MDVSA-2011:110	Broken Link
6	http://www.redhat.com/support/errata/RHSA-2011-0837.html	Broken Link
7	http://www.redhat.com/support/errata/RHSA-2011-0838.html	Broken Link
8	http://www.securityfocus.com/bid/48057	Broken Link Third Party Advisory VDB Entry
9	https://bugzilla.redhat.com/show_bug.cgi?id=689831	Issue Tracking Patch Third Party Advisory
10	https://exchange.xforce.ibmcloud.com/vulnerabilities/67787	Third Party Advisory VDB Entry
11	http://git.gnome.org/browse/gimp/commit/?id=a9671395f6573e90316a9d748588c5435216f6ce	Patch Third Party Advisory
12	https://exchange.xforce.ibmcloud.com/vulnerabilities/67787	Third Party Advisory VDB Entry
13	https://bugzilla.redhat.com/show_bug.cgi?id=689831	Issue Tracking Patch Third Party Advisory
14	http://www.securityfocus.com/bid/48057	Broken Link Third Party Advisory VDB Entry
15	http://www.redhat.com/support/errata/RHSA-2011-0838.html	Broken Link
16	http://www.redhat.com/support/errata/RHSA-2011-0837.html	Broken Link
17	http://www.mandriva.com/security/advisories?name=MDVSA-2011:110	Broken Link
18	http://securitytracker.com/id?1025586	Broken Link Third Party Advisory VDB Entry
19	http://security.gentoo.org/glsa/glsa-201209-23.xml	Third Party Advisory
20	http://secunia.com/advisories/50737	Broken Link

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-190	整数オーバーフローまたはラップアラウンド	https://cwe.mitre.org/data/definitions/190.html

JVN Vulnerability Information

GIMP の PCX プラグインにおける整数オーバーフローの脆弱性

Title	GIMP の PCX プラグインにおける整数オーバーフローの脆弱性
Summary	GIMP の Personal Computer Exchange (PCX) プラグインの file-pcx.c 内にある load_image 関数には、整数オーバーフローの脆弱性が存在します。
Possible impacts	第三者により、ヒープベースのバッファオーバーフローを誘発する、巧妙に細工された PCX イメージを介して、サービス運用妨害 (アプリケーションクラッシュ) 状態にされる、または任意のコードを実行される可能性があります。
Solution	ベンダ情報及び参考情報を参照して適切な対策を実施してください。
Publication Date	May 31, 2011, midnight
Registration Date	June 14, 2011, 9:55 a.m.
Last Update	June 14, 2011, 9:55 a.m.

Affected System

レッドハット

Red Hat Enterprise Linux 4 (as)

Red Hat Enterprise Linux 4 (es)

Red Hat Enterprise Linux 4 (ws)

Red Hat Enterprise Linux 4.8 (as)

Red Hat Enterprise Linux 4.8 (es)

Red Hat Enterprise Linux 5 (server)

Red Hat Enterprise Linux Desktop 4.0

Red Hat Enterprise Linux Desktop 5.0 (client)

Red Hat Enterprise Linux EUS 5.6.z (server)

Red Hat Enterprise Linux Long Life (v. 5.6 server)

RHEL Desktop Workstation 5 (client)

The GIMP Team

GIMP 2.6.x およびそれ以前

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-1178	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1178
National Vulnerability Database (NVD)
2	CVE-2011-1178	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1178

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-189	https://jvndb.jvn.jp/ja/cwe/CWE-189.html

ベンダー情報

No	Name	URL
GIMP
1	Top Page	http://www.gimp.org
Red Hat Security Advisory
2	RHSA-2011:0837	https://rhn.redhat.com/errata/RHSA-2011-0837.html
3	RHSA-2011:0838	https://rhn.redhat.com/errata/RHSA-2011-0838.html

その他

No	Name	URL
SecurityFocus
1	48057	http://www.securityfocus.com/bid/48057
SecurityTracker
2	1025586	http://www.securitytracker.com/id/1025586

Change Log

No	Changed Details	Date of change
0	[2011年06月14日] 掲載	Feb. 17, 2018, 10:37 a.m.