Integer overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large color entries value in an X Window System (XWD) image dump.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0052 advisory.

    This advisory aggregates security fixes for the gimp SRPM in CIQ LTS 8.6. It addresses 20 CVEs:
    CVE-2011-1782, CVE-2017-17787, CVE-2010-4541, CVE-2013-1978, CVE-2017-17789, and 15 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0052 advisory.

    This advisory aggregates security fixes for the gimp SRPM in CIQ LTS 8.6. It addresses 20 CVEs:
    CVE-2011-1782, CVE-2017-17787, CVE-2010-4541, CVE-2013-1978, CVE-2017-17789, and 15 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0419 advisory.

    This advisory aggregates security fixes for the gimp SRPM in CIQ LTS 9.2. It addresses 22 CVEs:
    CVE-2011-1782, CVE-2017-17787, CVE-2010-4541, CVE-2013-1978, CVE-2023-44443, and 17 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-037:01 advisory.

    GIMP (GNU Image Manipulation Program) is a powerful image composition and editing program, which can be     extremely useful for creating logos and other graphics for webpages. GIMP has many of the tools and     filters you would expect to find in similar commercial offerings, and some interesting extras as well.
    GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-     pixel imaging and anti-aliasing, and conversions, all with multi-level undo.
    Security issues fixed with this release:
     CVE-2012-5576     Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow     remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large (1)     red, (2) green, or (3) blue color mask in an XWD file.
     CVE-2013-1913     Integer overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9     and earlier, when used with glib before 2.24, allows remote attackers to cause a denial of service (crash)     and possibly execute arbitrary code via a large color entries value in an X Window System (XWD) image     dump.
     CVE-2013-1978     Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in     in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly     execute arbitrary code via an X Window System (XWD) image dump with more colors than color map entries.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201603-01 (GIMP: Multiple vulnerabilities)

    GIMP&rsquo;s network server, scriptfu, is vulnerable to the remote execution       of arbitrary code via the python-fu-eval command due to not requiring       authentication.  Additionally, the X Window Dump (XWD) plugin is       vulnerable to multiple buffer overflows possibly allowing the remote       execution of arbitrary code or Denial of Service.  The XWD plugin is       vulnerable due to not validating large color entries.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process due or perform a Denial of Service.
  Workaround :

    There is no known work around at this time.

This update fixes the following security issues with gimp :

  - XWD plugin g_new() integer overflow. (CVE-2013-1913).
    (bnc#853423)

  - XWD plugin color map heap-based buffer overflow.
    (CVE-2013-1978). (bnc#853425)

  - memory corruption via XWD files (CVE-2012-5576).
    (bnc#791372)

Updated gimp package fixes security vulnerabilities :

An integer overflow flaw and a heap-based buffer overflow were found in the way GIMP loaded certain X Window System (XWD) image dump files.
A remote attacker could provide a specially crafted XWD image file that, when processed, would cause the XWD plug-in to crash or, potentially, execute arbitrary code with the privileges of the user running the GIMP (CVE-2013-1913, CVE-2013-1978).

This update fixes buffer overflows in the XWD loader.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Overview of Changes from GIMP 2.8.8 to GIMP 2.8.10 ==================================================

GUI :

  - Indicate if a file was exported in the Quit dialog

    - Add shortcuts and hint labels to the close and quit       dialogs that make closing and quitting easier and more       consistent

  - Rename the File->Export menu labels to match Save/Save     as

    - Fix keyboard shortcuts on OSX Mavericks

    - Don't open lots of progress popups when opening many       files

    - Correctly restore the hidden state of docks in single       window mode

Libgimp :

  - Fix exporting an image consisting of a single layer     group

    - Don't attempt to pick transparent colors

Plug-ins :

  - Fix crash in LCMS plugin if RGB profile was missing

General :

  - Bug fixes

    - Translation updates Overview of Changes from GIMP       2.8.8 to GIMP 2.8.10       ==================================================

GUI :

  - Indicate if a file was exported in the Quit dialog

    - Add shortcuts and hint labels to the close and quit       dialogs that make closing and quitting easier and more       consistent

  - Rename the File->Export menu labels to match Save/Save     as

    - Fix keyboard shortcuts on OSX Mavericks

    - Don't open lots of progress popups when opening many       files

    - Correctly restore the hidden state of docks in single       window mode

Libgimp :

  - Fix exporting an image consisting of a single layer     group

    - Don't attempt to pick transparent colors

Plug-ins :

  - Fix crash in LCMS plugin if RGB profile was missing

General :

  - Bug fixes

    - Translation updates

Additionally, this update fixes buffer overflows in the XWD loader.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Murray McAllister discovered that GIMP incorrectly handled malformed XWD files. If a user were tricked into opening a specially crafted XWD file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A stack-based buffer overflow flaw, a heap-based buffer overflow, and an integer overflow flaw were found in the way GIMP loaded certain X Window System (XWD) image dump files. A remote attacker could provide a specially crafted XWD image file that, when processed, would cause the XWD plug-in to crash or, potentially, execute arbitrary code with the privileges of the user running the GIMP. (CVE-2012-5576, CVE-2013-1913, CVE-2013-1978)

The GIMP must be restarted for the update to take effect.

Murray McAllister discovered multiple integer and buffer overflows in the XWD plugin in Gimp, which can result in the execution of arbitrary code.

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:1778 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and     editing program.

    A stack-based buffer overflow flaw, a heap-based buffer overflow, and an     integer overflow flaw were found in the way GIMP loaded certain X Window     System (XWD) image dump files. A remote attacker could provide a specially     crafted XWD image file that, when processed, would cause the XWD plug-in to     crash or, potentially, execute arbitrary code with the privileges of the     user running the GIMP. (CVE-2012-5576, CVE-2013-1913, CVE-2013-1978)

    The CVE-2013-1913 and CVE-2013-1978 issues were discovered by Murray     McAllister of the Red Hat Security Response Team.

    Users of the GIMP are advised to upgrade to these updated packages, which     correct these issues. The GIMP must be restarted for the update to take     effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1778 advisory.

    - fix overflow in XWD loader (CVE-2013-1913, CVE-2013-1978)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated gimp packages that fix three security issues are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The GIMP (GNU Image Manipulation Program) is an image composition and editing program.

A stack-based buffer overflow flaw, a heap-based buffer overflow, and an integer overflow flaw were found in the way GIMP loaded certain X Window System (XWD) image dump files. A remote attacker could provide a specially crafted XWD image file that, when processed, would cause the XWD plug-in to crash or, potentially, execute arbitrary code with the privileges of the user running the GIMP. (CVE-2012-5576, CVE-2013-1913, CVE-2013-1978)

The CVE-2013-1913 and CVE-2013-1978 issues were discovered by Murray McAllister of the Red Hat Security Response Team.

Users of the GIMP are advised to upgrade to these updated packages, which correct these issues. The GIMP must be restarted for the update to take effect.

ID	Name	Product	Family	Type	Severity
358951	Rocky Linux 8.6 [CIQ] Security Update: gimp / gimp-debuginfo / gimp-debugsource / gimp-devel / etc Multiple Vulnerabilities (ciqsa-2026_0052)	Nessus	Rocky Linux Local Security Checks	Local	high
358861	Rocky Linux 8.8 [CIQ] Security Update: gimp / gimp-debuginfo / gimp-debugsource / gimp-devel / etc Multiple Vulnerabilities (ciqsa-2026_0052)	Nessus	Rocky Linux Local Security Checks	Local	high
354173	Rocky Linux 9.2 [CIQ] Security Update: gimp / gimp-debuginfo / gimp-debugsource / gimp-devel / etc Multiple Vulnerabilities (ciqsa-2026_0419)	Nessus	Rocky Linux Local Security Checks	Local	high
289713	MiracleLinux 4 : gimp-2.6.9-6.0.1.AXS4 (AXSA:2014-037:01)	Nessus	Miracle Linux Local Security Checks	Local	critical
89712	GLSA-201603-01 : GIMP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	medium
72422	SuSE 11.3 Security Update : gimp (SAT Patch Number 8856)	Nessus	SuSE Local Security Checks	Local	high
71512	Mandriva Linux Security Advisory : gimp (MDVSA-2013:293)	Nessus	Mandriva Local Security Checks	Local	medium
71476	Fedora 19 : gimp-2.8.10-4.fc19 (2013-22776)	Nessus	Fedora Local Security Checks	Local	medium
71475	Fedora 18 : gimp-2.8.10-4.fc18 (2013-22771)	Nessus	Fedora Local Security Checks	Local	medium
71419	Fedora 20 : gimp-2.8.10-4.fc20 (2013-22701)	Nessus	Fedora Local Security Checks	Local	medium
71309	Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : gimp vulnerability (USN-2051-1)	Nessus	Ubuntu Local Security Checks	Local	medium
71303	Scientific Linux Security Update : gimp on SL5.x, SL6.x i386/x86_64 (20131203)	Nessus	Scientific Linux Local Security Checks	Local	high
71276	Debian DSA-2813-1 : gimp - several vulnerabilities	Nessus	Debian Local Security Checks	Local	medium
71189	RHEL 5 / 6 : gimp (RHSA-2013:1778)	Nessus	Red Hat Local Security Checks	Local	critical
71186	Oracle Linux 5 / 6 : gimp (ELSA-2013-1778)	Nessus	Oracle Linux Local Security Checks	Local	high
71178	CentOS 5 / 6 : gimp (CESA-2013:1778)	Nessus	CentOS Local Security Checks	Local	high

Detections

Analytics

CVE-2013-1913

critical

Tenable Plugins

high

high

high

critical

medium

high

medium

medium

medium

medium

medium

high

medium

critical

high

high