VULNERABILITY INTELLIGENCE

CVE-2012-5576

CVSS score7.5 HIGH

EPSS probability6.81%

CISA KEVNot currently listed

Published2012-12-18

Last modified2026-06-16

Description

Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large (1) red, (2) green, or (3) blue color mask in an XWD file.