CVE-2010-4541 - CVE House
Back to Database
Status published Critical CVE-2010-4541

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in...

Vulnerability Description

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long "Number of lights" field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-4541

Credits & Attribution

No credits recorded in the NVD database.

References

More from gimp

View All →
CVE-2022-32990
An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers...
Medium 5.5
CVE-2022-30067
GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through...
Medium 5.5
CVE-2018-12713
GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames,...
Critical 9.1
CVE-2017-17789
In GIMP 2.8.22, there is a heap-based buffer overflow in...
High 7.8
CVE-2017-17788
In GIMP 2.8.22, there is a stack-based buffer over-read in...
Medium 5.5

Affected Vendor

Affected Software

gimp
Vulnerable Versions:
2.6.11

Timeline

Official Publish: January 7th, 2011
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.