CVE-2007-2949

Publication date 4 July 2007

Last updated 24 July 2024

Ubuntu priority

Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
gimp	7.04 feisty	Fixed 2.2.13-1ubuntu4.3
	6.10 edgy	Fixed 2.2.13-1ubuntu3.3
	6.06 LTS dapper	Fixed 2.2.11-1ubuntu3.4

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-480-1
Gimp vulnerability
4 July 2007

Other references

https://www.cve.org/CVERecord?id=CVE-2007-2949