VULNERABILITY INTELLIGENCE

CVE-2006-4519

CVSS score6.8 MEDIUM
EPSS probability5.60%
CISA KEVNot currently listed
Published2007-07-10
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.

Weakness classification

  • CWE-190: Integer Overflow or Wraparound

Primary references