CVE:CVE-2017-17784
CNNVD:CNNVD-201712-801
GIMP是GIMP团队的一款开源的位图图像编辑器。
GIMP 2.8.22版本中的gbr导入解析器存在缓冲区错误漏洞。攻击者可借助特制的文件利用该漏洞在系统上执行任意代码。
solution:Upgrade gimp gimp to a higher version than 2.8.22,and avoid the version 2.8.22; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,and avoid the version 14.04