CVE-2010-4543
NoneCVSS
—
EPSS
16.3%
Published
Jan 7, 2011
CISA due date
—
The record
Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image. NOTE: some of these details are obtained from third party information.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | gimp | 0 | 2.6.11-2 |
| Debian:11 | gimp | 0 | 2.6.11-2 |
| Debian:12 | gimp | 0 | 2.6.11-2 |
| Debian:13 | gimp | 0 | 2.6.11-2 |
| Debian:6.0 | gimp | 0 | 2.6.10-1+squeeze3 |
| Red Hat:enterprise_linux:4::as | gimp | 0 | 1:2.0.5-7.0.7.el4.1 |
| Red Hat:enterprise_linux:4::as | gimp-debuginfo | 0 | 1:2.0.5-7.0.7.el4.1 |
| Red Hat:enterprise_linux:4::as | gimp-devel | 0 | 1:2.0.5-7.0.7.el4.1 |
| Red Hat:enterprise_linux:4::desktop | gimp | 0 | 1:2.0.5-7.0.7.el4.1 |
| Red Hat:enterprise_linux:4::desktop | gimp-debuginfo | 0 | 1:2.0.5-7.0.7.el4.1 |
| Red Hat:enterprise_linux:4::desktop | gimp-devel | 0 | 1:2.0.5-7.0.7.el4.1 |
| Red Hat:enterprise_linux:4::es | gimp | 0 | 1:2.0.5-7.0.7.el4.1 |
| Red Hat:enterprise_linux:4::es | gimp-debuginfo | 0 | 1:2.0.5-7.0.7.el4.1 |
| Red Hat:enterprise_linux:4::es | gimp-devel | 0 | 1:2.0.5-7.0.7.el4.1 |
| Red Hat:enterprise_linux:4::ws | gimp | 0 | 1:2.0.5-7.0.7.el4.1 |
| Red Hat:enterprise_linux:4::ws | gimp-debuginfo | 0 | 1:2.0.5-7.0.7.el4.1 |
| Red Hat:enterprise_linux:4::ws | gimp-devel | 0 | 1:2.0.5-7.0.7.el4.1 |
| Red Hat:enterprise_linux:5::server | gimp | 0 | 2:2.2.13-2.0.7.el5_6.2 |
| Red Hat:enterprise_linux:5::server | gimp-debuginfo | 0 | 2:2.2.13-2.0.7.el5_6.2 |
| Red Hat:enterprise_linux:5::server | gimp-devel | 0 | 2:2.2.13-2.0.7.el5_6.2 |
| Red Hat:enterprise_linux:5::server | gimp-libs | 0 | 2:2.2.13-2.0.7.el5_6.2 |
| Red Hat:enterprise_linux:6::server | gimp | 0 | 2:2.6.9-4.el6_1.1 |
| Red Hat:enterprise_linux:6::server | gimp-debuginfo | 0 | 2:2.6.9-4.el6_1.1 |
| Red Hat:enterprise_linux:6::server | gimp-devel | 0 | 2:2.6.9-4.el6_1.1 |
| Red Hat:enterprise_linux:6::server | gimp-devel-tools | 0 | 2:2.6.9-4.el6_1.1 |
| Red Hat:enterprise_linux:6::server | gimp-help-browser | 0 | 2:2.6.9-4.el6_1.1 |
| Red Hat:enterprise_linux:6::server | gimp-libs | 0 | 2:2.6.9-4.el6_1.1 |
| openSUSE:Tumbleweed | gimp | 0 | 2.8.18-1.4 |
Related vulnerabilities
- CVE-2023-44444 GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. Also affects gimp
- CVE-2023-44442 GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. Also affects gimp
- CVE-2017-17784 In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in… Also affects gimp
- CVE-2012-3236 fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL… Also affects gimp
- CVE-2012-2763 Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in… Also affects gimp
- CVE-2025-5473 GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. Also affects gimp
- CVE-2025-2760 GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. Also affects gimp
- CVE-2023-44443 GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. Also affects gimp