This script is Copyright (C) 2007-2013 Tenable Network Security, Inc.
The remote Mandrake Linux host is missing one or more security
Multiple integer overflows in the image loader plug-ins in GIMP before
2.2.16 allow user-assisted remote attackers to execute arbitrary code
via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5)
Sun RAS, (6) XBM, and (7) XWD files. (CVE-2006-4519)
Integer overflow in the seek_to_and_unpack_pixeldata function in the
psd.c plugin in Gimp 2.2.15 allows remote attackers to execute
arbitrary code via a crafted PSD file that contains a large (1) width
or (2) height value. (CVE-2007-2949)
Victor Stinner has discovered several flaws in file plug-ins using his
fuzzyfier tool fusil. Several modified image files cause the plug-ins
to crash or consume excessive amounts of memory due to insufficient
input validation. Affected plug-ins: bmp, pcx, psd, psp (*.tub).
Updated packages have been patched to prevent these issues.
Update the affected packages.
Risk factor :
Medium / CVSS Base Score : 6.8