CVE-2012-3402

Integer overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP 2.2.13 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted channels header value in a PSD image file, which triggers a heap-based buffer overflow, a different vulnerability than CVE-2009-3909.

• CWE-190

• http://rhn.redhat.com/errata/RHSA-2012-1181.htmlThird Party Advisory
• http://secunia.com/advisories/50737Broken Link
• http://security.gentoo.org/glsa/glsa-201209-23.xmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2012/08/20/6Mailing List, Third Party Advisory
• http://www.securitytracker.com/id?1027411Broken Link, Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/attachment.cgi?id=603059&action=diffIssue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=838941Issue Tracking, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1181.htmlThird Party Advisory
• http://secunia.com/advisories/50737Broken Link
• http://security.gentoo.org/glsa/glsa-201209-23.xmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2012/08/20/6Mailing List, Third Party Advisory
• http://www.securitytracker.com/id?1027411Broken Link, Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/attachment.cgi?id=603059&action=diffIssue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=838941Issue Tracking, Third Party Advisory

Published

Aug 25, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3396Cross-site scripting (XSS) vulnerability in cohort/edit_form…
• CVE-2012-3397lib/modinfolib.php in Moodle 2.0.x before 2.0.10, 2.1.x befo…
• CVE-2012-3398Algorithmic complexity vulnerability in Moodle 1.9.x before …
• CVE-2012-3399Config/diff.php in Basilic 1.5.14 allows remote attackers to…
• CVE-2012-3400Heap-based buffer overflow in the udf_load_logicalvol functi…
• CVE-2012-3401The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.…
• CVE-2012-3403Heap-based buffer overflow in the KiSS CEL file format plug-…
• CVE-2012-3404The vfprintf function in stdio-common/vfprintf.c in libc in …
• CVE-2012-3405The vfprintf function in stdio-common/vfprintf.c in libc in …
• CVE-2012-3406The vfprintf function in stdio-common/vfprintf.c in GNU C Li…
• CVE-2012-3407plow has local buffer overflow vulnerability7.8
• CVE-2012-3408lib/puppet/network/authstore.rb in Puppet before 2.7.18, and…