Summary
It was discovered that GIMP incorrectly handled malformed XCF files. If a
user were tricked into opening a specially crafted XCF file, an attacker
could cause GIMP to crash, or possibly execute arbitrary code with the
user's privileges.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | gimp | 2.8.10-0ubuntu1.1 |
Vulnerabilities 1
-
Unscored —
Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to ca…
References
-
report
https://ubuntu.com/security/CVE-2016-4994