Buffer overflow in gimp (Alpine package)

1) Buffer overflow

EUVDB-ID: #VU33322

Risk: Medium

CVSSv4.0: 1.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2012-2763

CWE-ID: CWE-119 - Memory corruption

Exploit availability: Yes

Description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long string in a command to the script-fu server.

Mitigation

Install update from vendor's website.

Vulnerable software versions

gimp (Alpine package): 2.6.10-r0 - 2.6.11-r7

CPE2.3

• cpe:2.3:a:alpine:gimp_alpine_package:2.6.10-r0:*:*:*:*:alpine_linux:*:2.0
• cpe:2.3:a:alpine:gimp_alpine_package:2.6.11-r0:*:*:*:*:alpine_linux:*:2.1
• cpe:2.3:a:alpine:gimp_alpine_package:2.6.11-r1:*:*:*:*:alpine_linux:*:2.1

External links

https://git.alpinelinux.org/aports/commit/?id=b66f36cabcb08c2c0c87b798b8a4eb6ba822e01a
https://git.alpinelinux.org/aports/commit/?id=7cbf993f1a9a0f30b833795efddd3979c2d646b9
https://git.alpinelinux.org/aports/commit/?id=6f6c15d5702091599711d14bafecaec639c40df8
https://git.alpinelinux.org/aports/commit/?id=222ced7f929deb2c0d2429b3d094cee12293e1fa

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.