CVE-2007-2356
NoneCVSS
—
EPSS
15.7%
Published
Apr 30, 2007
CISA due date
—
The record
Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | gimp | 0 | 2.2.14-2 |
| Debian:12 | gimp | 0 | 2.2.14-2 |
| Debian:13 | gimp | 0 | 2.2.14-2 |
| Debian:3.1 | gimp | 0 | 2.2.6-1sarge2 |
| Debian:4.0 | gimp | 0 | 2.2.13-1etch1 |
| Red Hat:enterprise_linux:2.1::as | gimp | 0 | 1:1.2.1-7.1.el2_1 |
| Red Hat:enterprise_linux:2.1::as | gimp-devel | 0 | 1:1.2.1-7.1.el2_1 |
| Red Hat:enterprise_linux:2.1::as | gimp-perl | 0 | 1:1.2.1-7.1.el2_1 |
| Red Hat:enterprise_linux:2.1::aw | gimp | 0 | 1:1.2.1-7.1.el2_1 |
| Red Hat:enterprise_linux:2.1::aw | gimp-devel | 0 | 1:1.2.1-7.1.el2_1 |
| Red Hat:enterprise_linux:2.1::aw | gimp-perl | 0 | 1:1.2.1-7.1.el2_1 |
| Red Hat:enterprise_linux:2.1::es | gimp | 0 | 1:1.2.1-7.1.el2_1 |
| Red Hat:enterprise_linux:2.1::es | gimp-devel | 0 | 1:1.2.1-7.1.el2_1 |
| Red Hat:enterprise_linux:2.1::es | gimp-perl | 0 | 1:1.2.1-7.1.el2_1 |
| Red Hat:enterprise_linux:2.1::ws | gimp | 0 | 1:1.2.1-7.1.el2_1 |
| Red Hat:enterprise_linux:2.1::ws | gimp-devel | 0 | 1:1.2.1-7.1.el2_1 |
| Red Hat:enterprise_linux:2.1::ws | gimp-perl | 0 | 1:1.2.1-7.1.el2_1 |
| Red Hat:enterprise_linux:3::as | gimp | 0 | 1:1.2.3-20.3.el3 |
| Red Hat:enterprise_linux:3::as | gimp-devel | 0 | 1:1.2.3-20.3.el3 |
| Red Hat:enterprise_linux:3::as | gimp-perl | 0 | 1:1.2.3-20.3.el3 |
| Red Hat:enterprise_linux:3::desktop | gimp | 0 | 1:1.2.3-20.3.el3 |
| Red Hat:enterprise_linux:3::desktop | gimp-devel | 0 | 1:1.2.3-20.3.el3 |
| Red Hat:enterprise_linux:3::desktop | gimp-perl | 0 | 1:1.2.3-20.3.el3 |
| Red Hat:enterprise_linux:3::es | gimp | 0 | 1:1.2.3-20.3.el3 |
| Red Hat:enterprise_linux:3::es | gimp-devel | 0 | 1:1.2.3-20.3.el3 |
| Red Hat:enterprise_linux:3::es | gimp-perl | 0 | 1:1.2.3-20.3.el3 |
| Red Hat:enterprise_linux:3::ws | gimp | 0 | 1:1.2.3-20.3.el3 |
| Red Hat:enterprise_linux:3::ws | gimp-devel | 0 | 1:1.2.3-20.3.el3 |
| Red Hat:enterprise_linux:3::ws | gimp-perl | 0 | 1:1.2.3-20.3.el3 |
| Red Hat:enterprise_linux:4::as | gimp | 0 | 1:2.0.5-6.2.el4 |
| Red Hat:enterprise_linux:4::as | gimp-debuginfo | 0 | 1:2.0.5-6.2.el4 |
| Red Hat:enterprise_linux:4::as | gimp-devel | 0 | 1:2.0.5-6.2.el4 |
| Red Hat:enterprise_linux:4::desktop | gimp | 0 | 1:2.0.5-6.2.el4 |
| Red Hat:enterprise_linux:4::desktop | gimp-debuginfo | 0 | 1:2.0.5-6.2.el4 |
| Red Hat:enterprise_linux:4::desktop | gimp-devel | 0 | 1:2.0.5-6.2.el4 |
| Red Hat:enterprise_linux:4::es | gimp | 0 | 1:2.0.5-6.2.el4 |
| Red Hat:enterprise_linux:4::es | gimp-debuginfo | 0 | 1:2.0.5-6.2.el4 |
| Red Hat:enterprise_linux:4::es | gimp-devel | 0 | 1:2.0.5-6.2.el4 |
| Red Hat:enterprise_linux:4::ws | gimp | 0 | 1:2.0.5-6.2.el4 |
| Red Hat:enterprise_linux:4::ws | gimp-debuginfo | 0 | 1:2.0.5-6.2.el4 |
| Red Hat:enterprise_linux:4::ws | gimp-devel | 0 | 1:2.0.5-6.2.el4 |
| Red Hat:enterprise_linux:5::client | gimp | 0 | 2:2.2.13-2.el5 |
| Red Hat:enterprise_linux:5::client | gimp-debuginfo | 0 | 2:2.2.13-2.el5 |
| Red Hat:enterprise_linux:5::client | gimp-devel | 0 | 2:2.2.13-2.el5 |
| Red Hat:enterprise_linux:5::client | gimp-libs | 0 | 2:2.2.13-2.el5 |
| Red Hat:enterprise_linux:5::client_workstation | gimp | 0 | 2:2.2.13-2.el5 |
| Red Hat:enterprise_linux:5::client_workstation | gimp-debuginfo | 0 | 2:2.2.13-2.el5 |
| Red Hat:enterprise_linux:5::client_workstation | gimp-devel | 0 | 2:2.2.13-2.el5 |
| Red Hat:enterprise_linux:5::client_workstation | gimp-libs | 0 | 2:2.2.13-2.el5 |
| Red Hat:enterprise_linux:5::server | gimp | 0 | 2:2.2.13-2.el5 |
| Red Hat:enterprise_linux:5::server | gimp-debuginfo | 0 | 2:2.2.13-2.el5 |
| Red Hat:enterprise_linux:5::server | gimp-devel | 0 | 2:2.2.13-2.el5 |
| Red Hat:enterprise_linux:5::server | gimp-libs | 0 | 2:2.2.13-2.el5 |
| openSUSE:Tumbleweed | gimp | 0 | 2.10.24-3.1 |
Related vulnerabilities
- CVE-2025-5473 GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. Also affects gimp
- CVE-2025-2760 GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. Also affects gimp
- CVE-2023-44443 GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. Also affects gimp
- CVE-2023-44444 GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. Also affects gimp
- CVE-2023-44441 GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. Also affects gimp
- CVE-2023-44442 GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. Also affects gimp
- CVE-2017-17784 In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in… Also affects gimp
- CVE-2016-4994 Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP… Also affects gimp