CVE-2007-3741
The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote...
The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (crash or memory consumption) via crafted image files, as discovered using the fusil fuzzing tool.
Exploit likelihood
What each source reports
NVD Score used
The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (crash or memory consumption) via crafted image files, as discovered using the fusil fuzzing tool.
- Record
CVE-2007-3741- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (crash or memory consumption) via crafted image files, as discovered using the fusil fuzzing tool.
- Record
CVE-2007-3741- Updated
- 2026-11-02
EUVDEUVD-2007-3725 No score
The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (crash or memory consumption) via crafted image files, as discovered using the fusil fuzzing tool.
- Record
EUVD-2007-3725- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7624-6867-rjhv No score
The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote...
The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (crash or memory consumption) via crafted image files, as discovered using the fusil fuzzing tool.
- Record
GHSA-7624-6867-rjhv- Updated
- 2026-11-02
OSV No score
The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (crash or memory consumption) via crafted image files, as discovered using the fusil fuzzing tool.
- Record
CVE-2007-3741- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-3741 No score
The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (crash or memory consumption) via crafted image files, as discovered using the fusil fuzzing tool.
- Record
DEBIAN-CVE-2007-3741- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gimpDebian:12 |
before 2.2.17-1 | 2.2.17-1 |
gimpDebian:13 |
before 2.2.17-1 | 2.2.17-1 |
gimpDebian:14 |
before 2.2.17-1 | 2.2.17-1 |
gimpRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 1:1.2.1-7.8.el2_1 | 1:1.2.1-7.8.el2_1 |
gimp-develRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 1:1.2.1-7.8.el2_1 | 1:1.2.1-7.8.el2_1 |
gimp-perlRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 1:1.2.1-7.8.el2_1 | 1:1.2.1-7.8.el2_1 |
gimpRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 1:1.2.1-7.8.el2_1 | 1:1.2.1-7.8.el2_1 |
gimp-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 1:1.2.1-7.8.el2_1 | 1:1.2.1-7.8.el2_1 |
gimp-perlRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 1:1.2.1-7.8.el2_1 | 1:1.2.1-7.8.el2_1 |
gimpRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 1:1.2.1-7.8.el2_1 | 1:1.2.1-7.8.el2_1 |
Show 39 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gimp-develRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 1:1.2.1-7.8.el2_1 | 1:1.2.1-7.8.el2_1 |
gimp-perlRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 1:1.2.1-7.8.el2_1 | 1:1.2.1-7.8.el2_1 |
gimpRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 1:1.2.1-7.8.el2_1 | 1:1.2.1-7.8.el2_1 |
gimp-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 1:1.2.1-7.8.el2_1 | 1:1.2.1-7.8.el2_1 |
gimp-perlRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 1:1.2.1-7.8.el2_1 | 1:1.2.1-7.8.el2_1 |
gimpRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 1:1.2.3-20.9.el3 | 1:1.2.3-20.9.el3 |
gimp-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 1:1.2.3-20.9.el3 | 1:1.2.3-20.9.el3 |
gimp-perlRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 1:1.2.3-20.9.el3 | 1:1.2.3-20.9.el3 |
gimpRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 1:1.2.3-20.9.el3 | 1:1.2.3-20.9.el3 |
gimp-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 1:1.2.3-20.9.el3 | 1:1.2.3-20.9.el3 |
gimp-perlRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 1:1.2.3-20.9.el3 | 1:1.2.3-20.9.el3 |
gimpRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 1:1.2.3-20.9.el3 | 1:1.2.3-20.9.el3 |
gimp-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 1:1.2.3-20.9.el3 | 1:1.2.3-20.9.el3 |
gimp-perlRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 1:1.2.3-20.9.el3 | 1:1.2.3-20.9.el3 |
gimpRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 1:1.2.3-20.9.el3 | 1:1.2.3-20.9.el3 |
gimp-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 1:1.2.3-20.9.el3 | 1:1.2.3-20.9.el3 |
gimp-perlRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 1:1.2.3-20.9.el3 | 1:1.2.3-20.9.el3 |
gimpRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 1:2.0.5-7.0.7.el4 | 1:2.0.5-7.0.7.el4 |
gimp-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 1:2.0.5-7.0.7.el4 | 1:2.0.5-7.0.7.el4 |
gimp-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 1:2.0.5-7.0.7.el4 | 1:2.0.5-7.0.7.el4 |
gimpRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 1:2.0.5-7.0.7.el4 | 1:2.0.5-7.0.7.el4 |
gimp-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 1:2.0.5-7.0.7.el4 | 1:2.0.5-7.0.7.el4 |
gimp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 1:2.0.5-7.0.7.el4 | 1:2.0.5-7.0.7.el4 |
gimpRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 1:2.0.5-7.0.7.el4 | 1:2.0.5-7.0.7.el4 |
gimp-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 1:2.0.5-7.0.7.el4 | 1:2.0.5-7.0.7.el4 |
gimp-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 1:2.0.5-7.0.7.el4 | 1:2.0.5-7.0.7.el4 |
gimpRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 1:2.0.5-7.0.7.el4 | 1:2.0.5-7.0.7.el4 |
gimp-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 1:2.0.5-7.0.7.el4 | 1:2.0.5-7.0.7.el4 |
gimp-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 1:2.0.5-7.0.7.el4 | 1:2.0.5-7.0.7.el4 |
gimpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 2:2.2.13-2.0.7.el5 | 2:2.2.13-2.0.7.el5 |
gimp-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 2:2.2.13-2.0.7.el5 | 2:2.2.13-2.0.7.el5 |
gimp-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 2:2.2.13-2.0.7.el5 | 2:2.2.13-2.0.7.el5 |
gimpRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 2:2.2.13-2.0.7.el5 | 2:2.2.13-2.0.7.el5 |
gimp-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 2:2.2.13-2.0.7.el5 | 2:2.2.13-2.0.7.el5 |
gimp-libsRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 2:2.2.13-2.0.7.el5 | 2:2.2.13-2.0.7.el5 |
gimpRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 2:2.2.13-2.0.7.el5 | 2:2.2.13-2.0.7.el5 |
gimp-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 2:2.2.13-2.0.7.el5 | 2:2.2.13-2.0.7.el5 |
gimp-develRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 2:2.2.13-2.0.7.el5 | 2:2.2.13-2.0.7.el5 |
gimp-libsRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 2:2.2.13-2.0.7.el5 | 2:2.2.13-2.0.7.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3741 is a medium vulnerability (CVSS 4.3) in Gnu Gimp, published August 27, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.62%, the 85th percentile. Fixed in gimp 2.2.17-1.
References
osvdb.org/42131
secunia.com/advisories/26575
redhat.com/support/errata/RHSA-2007-0513.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10099
mandriva.com/security/advisories?name=MDKSA-2007:170
Show 21 moreShow less
securityfocus.com/bid/25424
nvd.nist.gov/vuln/detail/CVE-2007-3741
access.redhat.com/errata/RHSA-2007:0513
bugzilla.redhat.com/show_bug.cgi?id=248053
github.com/advisories/GHSA-7624-6867-rjhv
security-tracker.debian.org/tracker/CVE-2007-3741
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0513.json
cve.org/CVERecord?id=CVE-2006-4519