CVE-2009-1570

Description

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.

How to fix CVE-2009-1570

To remediate CVE-2009-1570, upgrade the affected package to a fixed version below.

• Debian/gimp—upgrade to 2.6.7-1.1 or later

Is CVE-2009-1570 being exploited?

Moderate — EPSS is 8.0%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (1)

• from 0, < 2.6.7-1.1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2009-1570