CVE-2012-3481

Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allows remote attackers…

published August 25, 2012

CVSS
—
EPSS
5%
Percentile
92.3
In the wild
Unconfirmed
What it is

Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted height and len properties in a GIF image file, which triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05142 · 92.3th percentile
Published
2012-08-25T10:00Z
EPSS history
Timeline
  • 25 AUG 10:00Z
    Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allows remote attackers…
    cvelistv5