CVE-2007-2356: gimp Out-of-bounds Write

EPSS trend

Probability

15.67%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 15.67% on 19-09-2026

19-09-202619-10-2026

EPSS score

15.67%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaselocalwindowsVerified
GIMP 2.2.14 - '.ras' SUNRAS Plugin Buffer Overflow
Maturity: weaponized
exploit-databaselocalwindows_x86Verified
GIMP 2.2.14 (Windows x86) - '.ras' Download/Execute Buffer Overflow
Maturity: weaponized

References

36 links

bugzilla.redhat.com/bugzilla/show_bug.cgi?id=238422X Refsource CONFIRMIssue TrackingThird Party Advisory
www.debian.org/security/2007/dsa-1301Vendor AdvisoryX Refsource DEBIANPatchThird Party Advisory
security.gentoo.org/glsa/glsa-200705-08.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/25573Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/25466Third Party AdvisoryX Refsource SECUNIABroken Link
www.securityfocus.com/bid/23680VDB EntryX Refsource BIDExploitPatchThird Party Advisory
www.securityfocus.com/archive/1/467231/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/33911VDB EntryX Refsource XFThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10054VDB EntrySignatureX Refsource OVALTool Signature
sunsolve.sun.com/search/document.do?assetkey=1-66-201320-1Vendor AdvisoryX Refsource SUNALERTBroken LinkThird Party Advisory

Show all 36 references

secunia.com/advisories/25359Third Party AdvisoryX Refsource SECUNIABroken Link
www.vupen.com/english/advisories/2007/1560VDB EntryX Refsource VUPENBroken LinkVendor Advisory
www.redhat.com/support/errata/RHSA-2007-0343.htmlVendor AdvisoryX Refsource REDHATPatchThird Party Advisory
www.securitytracker.com/id?1018092VDB EntryX Refsource SECTRACKThird Party Advisory
lists.suse.com/archive/suse-security-announce/2007-May/0005.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
secunia.com/advisories/28114Third Party AdvisoryX Refsource SECUNIABroken Link
issues.rpath.com/browse/RPL-1318X Refsource CONFIRMBroken Link
secunia.com/advisories/25012Third Party AdvisoryX Refsource SECUNIABroken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5960VDB EntrySignatureX Refsource OVALTool Signature
www.ubuntu.com/usn/usn-467-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1Vendor AdvisoryX Refsource SUNALERTBroken LinkThird Party Advisory
secunia.com/advisories/25346Third Party AdvisoryX Refsource SECUNIABroken Link
www.mandriva.com/security/advisories?name=MDKSA-2007:108Vendor AdvisoryX Refsource MANDRIVABroken Link
secunia.com/advisories/25111Third Party AdvisoryX Refsource SECUNIABroken Link
www.vupen.com/english/advisories/2007/4241VDB EntryX Refsource VUPENBroken LinkVendor Advisory
secunia.com/advisories/25239Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/25167Third Party AdvisoryX Refsource SECUNIABroken Link
access.redhat.com/errata/RHSA-2007:0343Advisory
www.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=238420REPORT
bugzilla.redhat.com/show_bug.cgi?id=238993REPORT
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0343.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-2356REPORT
www.cve.org/CVERecord?id=CVE-2007-2356Advisory
nvd.nist.gov/vuln/detail/CVE-2007-2356Advisory
security-tracker.debian.org/tracker/CVE-2007-2356Advisory

Related vulnerabilities

CVE-2018-12713debiangimp+21.95%8y ago24-06-2018 22:00GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_write_and_read_file function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was intended to be private.CVE-2013-1978debiangimp+24.19%12y ago12-12-2013 18:00Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an X Window System (XWD) image dump with more colors than color map entries.CVE-2013-1913debiangimp+24.07%12y ago12-12-2013 18:00Integer overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large color entries value in an X Window System (XWD) image dump.CVE-2021-45463debiangegl+201.55%4y ago23-12-2021 06:00load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.CVE-2007-2949canonicalubuntu_linux+27.17%19y ago04-07-2007 15:00Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.CVE-2007-3126debiangimp+52.85%19y ago08-06-2007 00:00Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.

All vulnerabilities ingimp

CVE-2007-2356: gimp Out-of-bounds Write

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References