CVE-2007-2949

Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.

🔗 References (60)

• PSIRT-CNA@flexerasoftwarehttp://issues.foresightlinux.org/browse/FL-457
• PSIRT-CNA@flexerasoftwarehttp://osvdb.org/37804
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/25677
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/25949
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/26044
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/26132
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/26215
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/26384
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/26575
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/26939
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/28114
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/secunia_research/2007-63/advisory/
• PSIRT-CNA@flexerasoftwarehttp://security.gentoo.org/glsa/glsa-200707-09.xml
• PSIRT-CNA@flexerasoftwarehttp://sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1
• PSIRT-CNA@flexerasoftwarehttp://sunsolve.sun.com/search/document.do?assetkey=1-66-201320-1