BSD PortsGimp -- GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability
[email protected] reports: GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XWD files. The issue …
Affected versions
- gimp < 3.0.0,2
By system
2 still vulnerable, 0 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | graphics/gimp | 2.10.38,2 | vulnerable since 2025-06-02 | |
| NetBSD | graphics/gimp | 3.2.6 | not listed | |
| MidnightBSD | graphics/gimp | 2.10.38,2 | in range, by version | |
| FreeBSD | graphics/gimp | 2.10.38,2 | vulnerable since 2025-06-02 |