CVE-2010-4541 PUBLISHED CVSS 9.300000190734863 CRITICAL

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long "Number of lights" field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself.

EPSS 4.03% · 88.4th percentile

Risk Scores

CVSS v2.0
9.300000190734863
EPSS Score
4.03%
88.4th percentile

Affected Products

VendorProductVersions
gimpgimp2.6.11
n/an/an/a

Timeline

References

…and 4 more

Open in Interactive Console →