CVE-2017-17786
20.12.2017, 09:29
In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA image.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gimp | gimp | 2.8.22 |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| canonical | ubuntu_linux | 14.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| gimp |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| gimp |
| ||||||||||||||
| gimp-lang |
| ||||||||||||||
| gimp-plugins-python |
| ||||||||||||||
| libgimp-2_0-0 |
| ||||||||||||||
| libgimpui-2_0-0 |
|
Common Weakness Enumeration
References