ID:3658 - Exploit for NULL pointer dereference in Gimp - CVE-2012-3236

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error. A remote attacker can trigger denial of service conditions via a malformed XTENSION header of a .fit file, as demonstrated using a long string.

Remediation