GCVE - cpe:2.3:a:gimp:gimp:2.6.11:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gimp:gimp:2.6.11:*:*:*:*:*:*:*

part: a version: 2.6.11 update: *

Vendor	Gimp (`85555a31-58ef-5f59-917a-6bb1acfb7967`)
Product	Gimp (`b791e0fa-2c6a-57eb-a6c3-9ce3d7f542be`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/gimp`	purl2cpe	2026-06-01 10:16:01.767265
`pkg:deb/ubuntu/gimp`	purl2cpe	2026-06-01 10:16:01.767267
`pkg:docker/gimp/gimp`	purl2cpe	2026-06-01 10:16:01.767268
`pkg:github/gnome/gimp`	purl2cpe	2026-06-01 10:16:01.767270
`pkg:gnome/gimp`	purl2cpe	2026-06-01 10:16:01.767271
`pkg:rpm/fedora/gimp`	purl2cpe	2026-06-01 10:16:01.767273

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1782`	vulnerable	2026-06-08 04:58:02.118357	Details available Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4543. Published: 2011-07-27T01:00:00.000Z Updated: 2024-08-06T22:37:25.816Z Open on db.gcve.eu Reference links http://www.debian.org/security/2012/dsa-2426 https://bugzilla.redhat.com/show_bug.cgi?id=704512 http://secunia.com/advisories/48236 http://www.mandriva.com/security/advisories?name=MDVSA-2011:103	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4543`	vulnerable	2026-06-08 04:56:29.099457	Details available Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image. NOTE: some of these details are obtained from third party information. Published: 2011-01-07T19:00:00.000Z Updated: 2024-08-07T03:51:17.272Z Open on db.gcve.eu Reference links http://www.debian.org/security/2012/dsa-2426 http://security.gentoo.org/glsa/glsa-201209-23.xml http://osvdb.org/70284 https://bugzilla.redhat.com/show_bug.cgi?id=666793 http://www.vupen.com/english/advisories/2011/0016	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4542`	vulnerable	2026-06-08 04:56:29.098978	Details available Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in plug-ins/gfig/gfig-style.c in the GFIG plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Foreground field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. NOTE: some of these details are obtained from third party information. Published: 2011-01-07T19:00:00.000Z Updated: 2024-08-07T03:51:17.370Z Open on db.gcve.eu Reference links http://www.debian.org/security/2012/dsa-2426 http://security.gentoo.org/glsa/glsa-201209-23.xml https://bugzilla.redhat.com/show_bug.cgi?id=666793 http://www.vupen.com/english/advisories/2011/0016 http://www.redhat.com/support/errata/RHSA-2011-0839.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4541`	vulnerable	2026-06-08 04:56:29.098490	Details available Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long "Number of lights" field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. Published: 2011-01-07T19:00:00.000Z Updated: 2024-08-07T03:51:16.959Z Open on db.gcve.eu Reference links http://www.debian.org/security/2012/dsa-2426 http://security.gentoo.org/glsa/glsa-201209-23.xml https://bugzilla.redhat.com/show_bug.cgi?id=666793 http://www.vupen.com/english/advisories/2011/0016 http://www.redhat.com/support/errata/RHSA-2011-0839.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4540`	vulnerable	2026-06-08 04:56:29.097859	Details available Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Position field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. NOTE: some of these details are obtained from third party information. Published: 2011-01-07T19:00:00.000Z Updated: 2024-08-07T03:51:17.657Z Open on db.gcve.eu Reference links http://www.debian.org/security/2012/dsa-2426 http://security.gentoo.org/glsa/glsa-201209-23.xml https://bugzilla.redhat.com/show_bug.cgi?id=666793 http://www.vupen.com/english/advisories/2011/0016 http://www.redhat.com/support/errata/RHSA-2011-0839.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

GIMP 2.6.11

Notes

PURL mappings

Vulnerability references

Contribute