CVE:CVE-2017-17787
CNNVD:CNNVD-201712-798
GIMP是GIMP团队的一款开源的位图图像编辑器。
GIMP 2.8.22版本中的plug-ins/common/file-psp.c文件的‘read_creator_block’函数存在缓冲区错误漏洞。攻击者可利用该漏洞在系统上执行任意代码。
solution:Upgrade gimp gimp to a higher version than 2.8.22,and avoid the version 2.8.22; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,and avoid the version 14.04