CVE-2012-3481

EPSS 3.8%

Published: 8/25/2012Modified: 4/28/2026

Also known as:DEBIAN-CVE-2012-3481

Description

Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted height and len properties in a GIF image file, which triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.

Affected packages (1)

Debian/gimpfrom 0, < 2.8.2-1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2012-3481