CVE-2012-3403

Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file, which triggers an "invalid free."

• CWE-787

• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00020.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1180.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1181.htmlThird Party Advisory
• http://secunia.com/advisories/50296Broken Link
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:142Broken Link
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:082Broken Link
• http://www.openwall.com/lists/oss-security/2012/08/20/7Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/55101Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1027411Broken Link, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1559-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=839020Issue Tracking, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00020.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1180.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1181.htmlThird Party Advisory
• http://secunia.com/advisories/50296Broken Link
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:142Broken Link
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:082Broken Link
• http://www.openwall.com/lists/oss-security/2012/08/20/7Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/55101Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1027411Broken Link, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1559-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=839020Issue Tracking, Third Party Advisory

Published

Aug 25, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3397lib/modinfolib.php in Moodle 2.0.x before 2.0.10, 2.1.x befo…
• CVE-2012-3398Algorithmic complexity vulnerability in Moodle 1.9.x before …
• CVE-2012-3399Config/diff.php in Basilic 1.5.14 allows remote attackers to…
• CVE-2012-3400Heap-based buffer overflow in the udf_load_logicalvol functi…
• CVE-2012-3401The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.…
• CVE-2012-3402Integer overflow in plug-ins/common/psd.c in the Adobe Photo…
• CVE-2012-3404The vfprintf function in stdio-common/vfprintf.c in libc in …
• CVE-2012-3405The vfprintf function in stdio-common/vfprintf.c in libc in …
• CVE-2012-3406The vfprintf function in stdio-common/vfprintf.c in GNU C Li…
• CVE-2012-3407plow has local buffer overflow vulnerability7.8
• CVE-2012-3408lib/puppet/network/authstore.rb in Puppet before 2.7.18, and…
• CVE-2012-3409ecryptfs-utils: suid helper does not restrict mounting files…7.8