CVE-2007-2356

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-04-30 · updated 2026-06-16
Weakness: CWE-787

Description

Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.

Affected products

GIMP: 2.2.14

References

http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html
http://secunia.com/advisories/25012
http://secunia.com/advisories/25111
http://secunia.com/advisories/25167
http://secunia.com/advisories/25239
http://secunia.com/advisories/25346
http://secunia.com/advisories/25359
http://secunia.com/advisories/25466
http://secunia.com/advisories/25573
http://secunia.com/advisories/28114
http://security.gentoo.org/glsa/glsa-200705-08.xml
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1

Get alerted when CVE-2007-2356 or the next vulnerability affects your stack