CVE-2012-2763

EPSS 81.7%

Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long string in a command to the script-fu server.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/18956unverified exploitdbwww.exploit-db.com/exploits/18973unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://git.gnome.org/browse/gimp/commit/?h=gimp-2-6&id=744f7a4a2b5acb8b531a6f5dd8744ebb95348fc2 http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.html http://lists.opensuse.org/opensuse-updates/2012-09/msg00043.html https://bugzilla.gnome.org/show_bug.cgi?id=679215 http://secunia.com/advisories/50737 http://security.gentoo.org/glsa/glsa-201209-23.xml http://www.openwall.com/lists/oss-security/2012/05/31/1 http://www.openwall.com/lists/oss-security/2012/07/01/1 http://www.reactionpenetrationtesting.co.uk/advisories/scriptfu-buffer-overflow-GIMP-2.6.html