CVE-2009-3909: gimp Integer Overflow or Wraparound

EPSS trend

Probability

8.69%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 8.69% on 19-09-2026

19-09-202619-10-2026

EPSS score

8.69%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

17 links

osvdb.org/60178VDB EntryX Refsource OSVDBBroken Link
www.debian.org/security/2009/dsa-1941Vendor AdvisoryX Refsource DEBIANThird Party Advisory
security.gentoo.org/glsa/glsa-201209-23.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
git.gnome.org/cgit/gimp/commit/?id=9cc8d78ff33b7a36852b74e64b427489cad44d0eX Refsource CONFIRMPatchVendor Advisory
www.vupen.com/english/advisories/2009/3270VDB EntryX Refsource VUPENBroken LinkVendor Advisory
rhn.redhat.com/errata/RHSA-2012-1181.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
git.gnome.org/cgit/gimp/commit/?id=0e440cb6d4d6ee029667363d244aff61b154c33cX Refsource CONFIRMPatchVendor Advisory
secunia.com/secunia_research/2009-43/X Refsource MISCBroken Link
bugzilla.gnome.org/show_bug.cgi?id=600741X Refsource MISCIssue TrackingThird Party Advisory
www.securityfocus.com/archive/1/507928/100/0/threadedMailing ListX Refsource BUGTRAQBroken LinkThird Party AdvisoryVDB Entry

Show all 17 references

lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
www.securityfocus.com/bid/37040VDB EntryX Refsource BIDBroken LinkThird Party Advisory
secunia.com/advisories/50737Third Party AdvisoryX Refsource SECUNIABroken Link
www.vupen.com/english/advisories/2010/1021VDB EntryX Refsource VUPENBroken Link
secunia.com/advisories/37348Third Party AdvisoryX Refsource SECUNIABroken Link
www.mandriva.com/security/advisories?name=MDVSA-2009:332Vendor AdvisoryX Refsource MANDRIVABroken Link
security-tracker.debian.org/tracker/CVE-2009-3909Advisory

Related vulnerabilities

CVE-2018-12713debiangimp+21.95%8y ago24-06-2018 22:00GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_write_and_read_file function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was intended to be private.CVE-2013-1978debiangimp+24.19%12y ago12-12-2013 18:00Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an X Window System (XWD) image dump with more colors than color map entries.CVE-2013-1913debiangimp+24.07%12y ago12-12-2013 18:00Integer overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large color entries value in an X Window System (XWD) image dump.CVE-2021-45463debiangegl+201.55%4y ago23-12-2021 06:00load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.CVE-2007-2949canonicalubuntu_linux+27.17%19y ago04-07-2007 15:00Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.CVE-2007-2356debiangimp+615.67%19y ago30-04-2007 22:00Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.

All vulnerabilities ingimp

CVE-2009-3909: gimp Integer Overflow or Wraparound

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References