CVE-2007-2949
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 7.2%
exploitation probability
7.2%top 6% of all CVEs
observed exploitation
nono source reports it
Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.
Affected products
n/a · n/aReferences
http://issues.foresightlinux.org/browse/FL-457http://osvdb.org/37804http://secunia.com/advisories/25677http://secunia.com/advisories/25949http://secunia.com/advisories/26044http://secunia.com/advisories/26132http://secunia.com/advisories/26215http://secunia.com/advisories/26384http://secunia.com/advisories/26575http://secunia.com/advisories/26939http://secunia.com/advisories/28114http://secunia.com/secunia_research/2007-63/advisory/