Upstream information
Description
Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Novell/SUSE information
Novell Bugzilla entry: 555144, 555166 SUSE Security Advisories:- SUSE-SR:2010:009, published Wed, 14 Apr 2010 13:00:00 +0000
- openSUSE-SU-2010:0110-1, published Wed, 14 Apr 2010 17:08:13 +0200 (CEST)
- openSUSE-SU-2010:0115-1, published Wed, 14 Apr 2010 17:08:22 +0200 (CEST)
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T SUSE Linux Enterprise Desktop 10 SP3 for x86 |
| sle10-sp3-sdk.ia64 sled10-sp3.x86-64 sle10-sp3-sdk.x86 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sle10-sp3-sdk.x86 sle10-sp3-sdk.ppc sled10-sp3.x86 sle10-sp3-sdk.x86-64 sle10-sp3-sdk.ppc sled10-sp3.x86 sle10-sp3-sdk.x86-64 sled10-sp3.x86-64 sle10-sp3-sdk.s390x ZYPP Patch Nr: 6880 |
| SUSE Linux Enterprise Desktop 10 SP2 for x86 |
| sled10-sp2.x86-64 sle10-sp2-sdk.ppc sle10-sp2-sdk.x86 sle10-sp2-sdk.ia64 sled10-sp2.x86 sle10-sp2-sdk.x86-64 sle10-sp2-sdk.s390x ZYPP Patch Nr: 6882 |
| SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T |
| sled10-sp2.x86-64 sle10-sp2-sdk.ppc sle10-sp2-sdk.x86 sle10-sp2-sdk.ia64 sled10-sp2.x86 sle10-sp2-sdk.x86-64 sle10-sp2-sdk.s390x ZYPP Patch Nr: 6882 |