Bug 428708 (CVE-2012-3236)

Summary:	<media-gfx/gimp-2.6.12-r5: DoS via .fit files (CVE-2012-3236)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	hanno
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3236
Whiteboard:	B3 [noglsa]
Package list:		Runtime testing required:	---
Bug Depends on:	434580
Bug Blocks:

Description GLSAMaker/CVETool Bot gentoo-dev

2012-07-30 20:52:48 UTC

CVE-2012-3236 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3236):
  fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of
  service (NULL pointer dereference and application crash) via a malformed
  XTENSION header of a .fit file, as demonstrated using a long string.


Looking at the upstream commit [1], the 2.6 branch also appears to be affected.

Comment 1 Sean Amoss (RETIRED) gentoo-dev

2012-07-30 20:54:59 UTC

(In reply to comment #0)
> CVE-2012-3236 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3236):
>   fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of
>   service (NULL pointer dereference and application crash) via a malformed
>   XTENSION header of a .fit file, as demonstrated using a long string.
> 
> 
> Looking at the upstream commit [1], the 2.6 branch also appears to be
> affected.

Sorry, copy/paste malfunction. 

[1] http://git.gnome.org/browse/gimp/commit/plug-ins/file-fits/fits-io.c?id=ace45631595e8781a1420842582d67160097163c

Comment 2 Sebastian Pipping gentoo-dev

2012-09-22 21:44:18 UTC

+*gimp-2.6.12-r5 (22 Sep 2012)
+
+  22 Sep 2012; Sebastian Pipping <sping@gentoo.org> +gimp-2.6.12-r5.ebuild,
+  +files/gimp-2.6.12-CVE-2012-3236.patch:
+  Apply upstream patch for CVE-2012-3236 (bug #428708)
+

Comment 3 Sean Amoss (RETIRED) gentoo-dev

2012-09-30 02:47:21 UTC

Thanks, Sebastian.

GLSA vote: no.

Comment 4 Tim Sammut (RETIRED) gentoo-dev

2012-10-02 06:25:16 UTC

Thanks, folks. GLSA Vote: no too, closing noglsa.