CVE-2007-3126
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an...
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
Exploit likelihood
What each source reports
NVD Score used
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
- Record
CVE-2007-3126- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
- Record
CVE-2007-3126- Updated
- 2026-11-02
EUVDEUVD-2007-3118 No score
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
- Record
EUVD-2007-3118- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4vhr-6jhx-vf2q No score
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an...
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
- Record
GHSA-4vhr-6jhx-vf2q- Updated
- 2026-11-02
OSV No score
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
- Record
CVE-2007-3126- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-3126 No score
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
- Record
DEBIAN-CVE-2007-3126- Updated
- 2026-11-02
OSVMGASA-2017-0112 No score
Updated gimp packages fix security vulnerability
Context-dependent attackers were able to cause a denial of service via an ICO file with an InfoHeader containing a Height of zero (CVE-2007-3126).
- Record
MGASA-2017-0112- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10785-1 No score
gimp-2.10.24-3.1 on GA media
These are all security issues fixed in the gimp-2.10.24-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10785-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:0945-1 No score
Security update for gimp
This update for gimp fixes the following issues:
This security issue was fixed:
- CVE-2007-3126: Context-dependent attackers were able to cause a denial of service via an ICO file with an InfoHeader containing a Height of zero (bsc#1032241).
These non-security issues were fixed:
- bsc#1025717: Prefer lcms2 over lcms1 if both are available
- bgo#593576: Preven crash in PDF Import filter when importing large image PDF or specifying high resolution
- Record
SUSE-SU-2017:0945-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gimpDebian:12 |
before 2.8.22-1 | 2.8.22-1 |
gimpDebian:13 |
before 2.8.22-1 | 2.8.22-1 |
gimpDebian:14 |
before 2.8.22-1 | 2.8.22-1 |
gimpMageia:5 |
before 2.8.14-4.2.mga5 | 2.8.14-4.2.mga5 |
gimpSUSE:Linux Enterprise Desktop 12 SP2 |
before 2.8.18-8.1 | 2.8.18-8.1 |
gimpSUSE:Linux Enterprise Software Development Kit 12 SP2 |
before 2.8.18-8.1 | 2.8.18-8.1 |
gimpSUSE:Linux Enterprise Workstation Extension 12 SP2 |
before 2.8.18-8.1 | 2.8.18-8.1 |
gimpopenSUSE:Tumbleweed From an advisory covering 4 CVEs |
before 2.10.24-3.1 | 2.10.24-3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3126 is a medium vulnerability (CVSS 5.0) in Gimp, published June 8, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.85%, the 86th percentile. Fixed in gimp 2.8.22-1.
References
osvdb.org/43453
bugzilla.gnome.org/show_bug.cgi?id=778604
git.gnome.org/browse/gimp/commit?id=323ecb73f7bf36788fb7066eb2d6678830cd5de7
securityfocus.com/archive/1/470751/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/34789
gimp.org/news/2017/05/11/gimp-2-8-22-released
Show 13 moreShow less
nvd.nist.gov/vuln/detail/CVE-2007-3126
github.com/advisories/GHSA-4vhr-6jhx-vf2q
security-tracker.debian.org/tracker/CVE-2007-3126
advisories.mageia.org/MGASA-2017-0112.html
bugs.mageia.org/show_bug.cgi?id=20663
lists.opensuse.org/opensuse-updates/2017-04/msg00046.html
suse.com/support/update/announcement/2017/suse-su-20170945-1
bugzilla.suse.com/1025717