CVE-2011-1178

Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PCX image that triggers a heap-based buffer overflow.

Score
CVSS 2.0 6.8 Medium
Status
Modified - secalert@redhat.com
Published
2011-06-06
Last modified
2024-08-06
Weaknesses
CWE-190

Affected products

References