Synopsis :

The remote Mandrake Linux host is missing one or more security
updates.

Description :

Multiple integer overflows in the image loader plug-ins in GIMP before
2.2.16 allow user-assisted remote attackers to execute arbitrary code
via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5)
Sun RAS, (6) XBM, and (7) XWD files. (CVE-2006-4519)

Integer overflow in the seek_to_and_unpack_pixeldata function in the
psd.c plugin in Gimp 2.2.15 allows remote attackers to execute
arbitrary code via a crafted PSD file that contains a large (1) width
or (2) height value. (CVE-2007-2949)

Victor Stinner has discovered several flaws in file plug-ins using his
fuzzyfier tool fusil. Several modified image files cause the plug-ins
to crash or consume excessive amounts of memory due to insufficient
input validation. Affected plug-ins: bmp, pcx, psd, psp (*.tub).
(CVE-2007-3741)

Updated packages have been patched to prevent these issues.

Solution :

Update the affected packages.

Risk factor :

Medium / CVSS Base Score : 6.8
(CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)