Every CVE Search/ Get API key

CVE-2013-1978

Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD)...

6.8 MediumFix available

Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an X Window System (XWD) image dump with more colors than color map entries.

Exploit likelihood

4.19%Down 0.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an X Window System (XWD) image dump with more colors than color map entries.

Record
CVE-2013-1978
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an X Window System (XWD) image dump with more colors than color map entries.

Record
CVE-2013-1978
Updated
2026-11-02
EUVDEUVD-2013-1966 No score

Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an X Window System (XWD) image dump with more colors than color map entries.

Record
EUVD-2013-1966
Updated
2026-11-03
GitHub AdvisoriesGHSA-m9mj-2mx7-5fr2 No score

Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD)...

Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an X Window System (XWD) image dump with more colors than color map entries.

Record
GHSA-m9mj-2mx7-5fr2
Weakness
CWE-787
Updated
2026-11-02
OSV No score

Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an X Window System (XWD) image dump with more colors than color map entries.

Record
CVE-2013-1978
Updated
2026-11-02
OSVDEBIAN-CVE-2013-1978 No score

Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an X Window System (XWD) image dump with more colors than color map entries.

Record
DEBIAN-CVE-2013-1978
Updated
2026-11-02
OSVMGASA-2013-0365 No score

Updated gimp package fixes security vulnerabilities

An integer overflow flaw and a heap-based buffer overflow were found in the way GIMP loaded certain X Window System (XWD) image dump files. A remote attacker could provide a specially crafted XWD image file that, when processed, would cause the XWD plug-in to crash or, potentially, execute arbitrary code with the privileges of the user running the GIMP (CVE-2013-1913, CVE-2013-1978).

Record
MGASA-2013-0365
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gimp
Debian:12
 before 2.8.10-0.1
2.8.10-0.1
gimp
Debian:13
 before 2.8.10-0.1
2.8.10-0.1
gimp
Debian:14
 before 2.8.10-0.1
2.8.10-0.1
gimp
Debian:6.0
From an advisory covering 2 CVEs
 before 2.6.10-1+squeeze4, plus listed versions
2.6.10-12.6.10-1+squeeze12.6.10-1+squeeze3
2.6.10-1+squeeze4
gimp
Debian:7
From an advisory covering 2 CVEs
 before 2.8.2-2+deb7u1, plus listed versions
2.8.2-2
2.8.2-2+deb7u1
gimp
Mageia:3
From an advisory covering 2 CVEs
 before 2.8.2-3.1.mga3
2.8.2-3.1.mga3
gimp
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
 before 2:2.2.13-3.el5_10
2:2.2.13-3.el5_10
gimp-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
 before 2:2.2.13-3.el5_10
2:2.2.13-3.el5_10
gimp-libs
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
 before 2:2.2.13-3.el5_10
2:2.2.13-3.el5_10
gimp
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 3 CVEs
 before 2:2.2.13-3.el5_10
2:2.2.13-3.el5_10
Show 24 moreShow less
Affected packages
PackageAffectedFixed
gimp-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 3 CVEs
 before 2:2.2.13-3.el5_10
2:2.2.13-3.el5_10
gimp-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 3 CVEs
 before 2:2.2.13-3.el5_10
2:2.2.13-3.el5_10
gimp
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
 before 2:2.2.13-3.el5_10
2:2.2.13-3.el5_10
gimp-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
 before 2:2.2.13-3.el5_10
2:2.2.13-3.el5_10
gimp-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
 before 2:2.2.13-3.el5_10
2:2.2.13-3.el5_10
gimp-libs
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
 before 2:2.2.13-3.el5_10
2:2.2.13-3.el5_10
gimp
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp-help-browser
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp-libs
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp-devel-tools
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp-help-browser
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp-libs
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp-devel-tools
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp-help-browser
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp-libs
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5
gimp-devel-tools
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 2:2.6.9-6.el6_5
2:2.6.9-6.el6_5

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-1978 is a medium vulnerability (CVSS 6.8) in Gimp, published December 6, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.19%, the 90th percentile. Fixed in gimp 2.8.10-0.1.

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open