[ MDVSA-2009:332-1 ] gimp

[dude67]

_______________________________________________________________________

Package : gimp
Date : April 28, 2010
Affected: 2009.0
_______________________________________________________________________

Problem Description:

A vulnerability was discovered and corrected in gimp:

Integer overflow in the read_channel_data function in
plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers
to execute arbitrary code via a crafted PSD file that triggers a
heap-based buffer overflow (CVE-2009-3909).

Additionally the patch for CVE-2009-1570 in MDVSA-2009:296 was
incomplete, this update corrects this as well.

This update provides a solution to this vulnerability.

Update:

Packages for 2009.0 are provided due to the Extended Maintenance
Program.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cg ... -2009-3909
_______________________________________________________________________