QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2010-4541

Back to search

CVE-2010-4541

Published: Jan 7, 2011

Modified: Aug 7, 2024

PUBLISHED

Description

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long "Number of lights" field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself.

VendorProductVersions

n/a

n/a

affected
n/a

References

DSA-2426
vendor-advisory
x_refsource_DEBIAN
GLSA-201209-23
vendor-advisory
x_refsource_GENTOO
ADV-2011-0016
vdb-entry
x_refsource_VUPEN
RHSA-2011:0839
vendor-advisory
x_refsource_REDHAT
RHSA-2011:0837
vendor-advisory
x_refsource_REDHAT
SUSE-SR:2011:005
vendor-advisory
x_refsource_SUSE
RHSA-2011:0838
vendor-advisory
x_refsource_REDHAT
44750
third-party-advisory
x_refsource_SECUNIA
42771
third-party-advisory
x_refsource_SECUNIA
70281
vdb-entry
x_refsource_OSVDB
50737
third-party-advisory
x_refsource_SECUNIA
48236
third-party-advisory
x_refsource_SECUNIA
gimp-sphere-designer-bo(64581)
vdb-entry
x_refsource_XF
MDVSA-2011:103
vendor-advisory
x_refsource_MANDRIVA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now