Lucene search
Ubuntu.comUB:CVE-2012-2763HistoryJul 12, 2012 - 12:00 a.m.
CVE-2012-2763
2012-07-1200:00:00
ubuntu.com
ubuntu.com
11
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.965
Percentile
99.6%
Buffer overflow in the readstr_upto function in
plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and
possibly 2.6.13, allows remote attackers to execute arbitrary code via a
long string in a command to the script-fu server.
Notes
| Author | Note |
|---|---|
| tyhicks | The vast majority of gimp installs will not be using the script-fu network server |
| mdeslaur | The script-fu network server should not be used in untrusted environments. We are not going to fix this, marking as ignored. |
Related
securityvulns
securityvulns
script-fu buffer overflow in GIMP 2.6
2012-06-03 00:00:00
GIMP script-fu buffer overflow
2012-08-20 00:00:00
nvd
nvd
CVE-2012-2763
2012-07-12 19:55:06
cvelist
cvelist
CVE-2012-2763
2012-07-12 19:00:00
openvas
openvas
GIMP Script-Fu Server Buffer Overflow Vulnerability
2012-06-27 00:00:00
SuSE Update for gimp openSUSE-SU-2012:1080-1 (gimp)
2012-12-13 00:00:00
openSUSE: Security Advisory for gimp (openSUSE-SU-2012:1080-1)
2012-12-13 00:00:00
checkpoint_advisories
checkpoint_advisories
Gimp Script-Fu Server Buffer Overflow (CVE-2012-2763)
2012-09-04 00:00:00
saint
saint
GIMP Script-Fu Server Buffer Overflow
2012-06-11 00:00:00
GIMP Script-Fu Server Buffer Overflow
2012-06-11 00:00:00
GIMP Script-Fu Server Buffer Overflow
2012-06-11 00:00:00
seebug
seebug
GIMP 2.6 script-fu < 2.8.0 - Buffer Overflow Vulnerability
2014-07-01 00:00:00
GIMP 2.6 script-fu < 2.8.0 Buffer Overflow Vulnerability
2012-06-01 00:00:00
cve
cve
CVE-2012-2763
2012-07-12 19:55:06
packetstorm
packetstorm
GIMP script-fu Server Buffer Overflow
2012-06-02 00:00:00
exploitpack
exploitpack
GIMP 2.6 script-fu 2.8.0 - Buffer Overflow (PoC)
2012-05-31 00:00:00
prion
prion
Buffer overflow
2012-07-12 19:55:00
nessus
nessus
SuSE 11.1 Security Update : Gimp (SAT Patch Number 6542)
2013-01-25 00:00:00
openSUSE Security Update : gimp (openSUSE-SU-2012:1131-1)
2014-06-13 00:00:00
debiancve
debiancve
CVE-2012-2763
2012-07-12 19:55:06
exploitdb
exploitdb
GIMP 2.6 script-fu < 2.8.0 - Buffer Overflow (PoC)
2012-05-31 00:00:00
suse
suse
gimp to fix various issues (important)
2012-09-03 11:09:17
gentoo
gentoo
GIMP: Multiple vulnerabilities
2012-09-28 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.965
Percentile
99.6%
Related for UB:CVE-2012-2763