Bug 198270

Summary: CVE-2006-3404 gimp xcf buffer overflow
Product: [Fedora] Fedora Reporter: Josh Bressers <bressers>
Component: gimpAssignee: Nils Philippsen <nphilipp>
Status: CLOSED ERRATA QA Contact: David Lawrence <dkl>
Severity: medium Docs Contact:
Priority: medium    
Version: 5Keywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard: source=debian,reported=20060706,public=20060706,impact=moderate
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2006-07-11 12:28:15 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
gimp-2.2.12-gcc4.patch none

Description Josh Bressers 2006-07-10 19:23:10 UTC 
+++ This bug was initially created as a clone of Bug #198269 +++

gimp xcf buffer overflow

Henning Makholm discovered a buffer overflow bug in gimp's XCF loader.
It is possible to overflow a static buffer with arbitrary data, which
could likely result in arbitrary code execution.

The upstream bug contains the patch:
http://bugzilla.gnome.org/show_bug.cgi?id=346742
Comment 1 Josh Bressers 2006-07-10 19:27:22 UTC 
This issue should also affect FC4
Comment 2 jens.koerber 2006-07-10 23:50:57 UTC 
Created attachment 132207 [details]
gimp-2.2.12-gcc4.patch

updated gcc4 patch ...
Comment 3 Nils Philippsen 2006-07-11 12:28:15 UTC 
gimp-2.2.12 has already been built for FC4, FC5 and Rawhide and waits for
pushing. Jens, thanks for the updated patch but with 2.2.12 it is no longer
necessary as upstream just uses -mmmx, -msse and so on to build these asm source
files.