CVE-2012-4245
The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote...
CVE-2012-4245 is a medium vulnerability (CVSS 6.8) in Gimp, published August 31, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.67%, the 91st percentile. No source names a fixed version.
The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via the python-fu-eval command.
Exploit likelihood
What each source reports
NVD Score used
The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via the python-fu-eval command.
- Record
CVE-2012-4245- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-862
- Updated
- 2026-11-02
CVE List No score
The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via the python-fu-eval command.
- Record
CVE-2012-4245- Updated
- 2026-11-02
EUVDEUVD-2012-4189 No score
The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via the python-fu-eval command.
- Record
EUVD-2012-4189- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p246-9qpc-9r7v No score
The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote...
The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via the python-fu-eval command.
- Record
GHSA-p246-9qpc-9r7v- Weakness
- CWE-862
- Updated
- 2026-11-02
OSV No score
The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via the python-fu-eval command.
- Record
CVE-2012-4245- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4245 No score
The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via the python-fu-eval command.
- Record
DEBIAN-CVE-2012-4245- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected | |
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |