CVE-2011-1782

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4543.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/48236Broken Link
http://www.debian.org/security/2012/dsa-2426Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:103Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=704512Issue Tracking, Patch, Third Party Advisory
http://secunia.com/advisories/48236Broken Link
http://www.debian.org/security/2012/dsa-2426Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:103Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=704512Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Jul 27, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-17834.3The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz CVE-2011-17843.6The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.CVE-2011-17857.8VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (socket exhaustion) via unspecified network CVE-2011-17865.0lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed i CVE-2011-17876.9Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x bef CVE-2011-17882.1vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via unspecif CVE-2011-17895.0The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware CVE-2011-17937.5rendering/svg/RenderSVGResourceFilter.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial CVE-2011-17947.5Integer overflow in the FilterEffect::copyImageBytes function in platform/graphics/filters/FilterEffect.cpp in the SVG filter implementation CVE-2011-17957.5Integer underflow in the HTMLFormElement::removeFormElement function in html/HTMLFormElement.cpp in WebCore in WebKit in Google Chrome befor CVE-2011-17967.5Use-after-free vulnerability in the FrameView::calculateScrollbarModesForLayout function in page/FrameView.cpp in WebCore in WebKit in Googl CVE-2011-17979.3WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt