| Vulnerability Name: | CVE-2012-3402 (CCN-77879) | ||||||||||||||||||||||||
| Assigned: | 2012-08-20 | ||||||||||||||||||||||||
| Published: | 2012-08-20 | ||||||||||||||||||||||||
| Updated: | 2023-02-13 | ||||||||||||||||||||||||
| Summary: | Integer overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP 2.2.13 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted channels header value in a PSD image file, which triggers a heap-based buffer overflow, a different vulnerability than CVE-2009-3909. | ||||||||||||||||||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||||||||||||||||||
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P) 5.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
5.0 Medium (REDHAT Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||||||||||||||||||
| Vulnerability Type: | CWE-122 | ||||||||||||||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2012-3402 Source: CCN Type: RHSA-2012-1181 Moderate: gimp security update Source: secalert@redhat.com Type: Third Party Advisory secalert@redhat.com Source: CCN Type: SA50296 GIMP CEL Plug-In Multiple Buffer Overflow Vulnerabilities Source: secalert@redhat.com Type: Third Party Advisory secalert@redhat.com Source: CCN Type: GIMP Web site GIMP - The GNU Image Manipulation Program Source: CCN Type: GIMP GIT Repository GIMP Source: secalert@redhat.com Type: Mailing List, Third Party Advisory secalert@redhat.com Source: CCN Type: OSVDB ID: 84835 GIMP plug-ins/common/psd.c PSD Image File Header Decoding Overflow Source: CCN Type: BID-55101 GIMP Multiple Buffer Overflow Vulnerabilities Source: CCN Type: BID-55103 GIMP CVE-2012-3402 Buffer Overflow Vulnerability Source: secalert@redhat.com Type: Broken Link, Third Party Advisory, VDB Entry secalert@redhat.com Source: secalert@redhat.com Type: Issue Tracking, Third Party Advisory secalert@redhat.com Source: CCN Type: Red Hat Bugzilla Bug 838941 CVE-2012-3402 gimp (PSD plug-in): Heap-buffer overflow by decoding certain PSD headers Source: secalert@redhat.com Type: Issue Tracking, Third Party Advisory secalert@redhat.com Source: XF Type: UNKNOWN gimp-adobe-photoshop-bo(77879) | ||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration RedHat 1: Denotes that component is vulnerable | ||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||
| |||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||