CVE-2017-17785

In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.

Several vulnerabilities were discovered in the GIMP which could result in denial of service (application crash) or potentially the execution of arbitrary code if malformed files are opened (CVE-2017-17784, CVE-2017-17785, CVE-2017-17786, CVE-2017-17787, CVE-2017-17788, CVE-2017-17789).

Updated gimp packages fix security vulnerabilities:

Several vulnerabilities were discovered in GIMP which could result in denial of service (application crash) or potentially the execution of arbitrary code if malformed files are opened (CVE-2017-17784, CVE-2017-17785, CVE-2017-17786, CVE-2017-17787, CVE-2017-17788, CVE-2017-17789).

Also, the webkit1-based help browser plugin has been disabled in favor of using an external browser for the help pages. This is due to security issues in webkit.

This update for gimp fixes the following issues:

• CVE-2017-17784: Fixed an insufficient string validation for input names (bsc#1073624).
• CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import (bsc#1073625).
• CVE-2017-17786: Fixed an out-of-bounds read in TGA (bsc#1073626).

This update was imported from the SUSE:SLE-15:Update update project.

This update for gimp fixes the following issues:

• Fix for crashing due to segmentation fault caused by importing ghostscript files. (bsc#1161998)

Security issues fixed:

• CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import (bsc#1073625)
• CVE-2017-17786: Fixed an out-of-bounds read in TGA (bsc#1073626)
• CVE-2017-17788: Fixed an out-of-bounds read in XCF (bsc#1073629)

This update for gimp fixes the following issues:

• CVE-2017-17784: Fixed an insufficient string validation for input names (bsc#1073624).
• CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import (bsc#1073625).
• CVE-2017-17786: Fixed an out-of-bounds read in TGA (bsc#1073626).

This update for gimp fixes the following issues:

• CVE-2017-17784: Fixed an insufficient string validation for input names (bsc#1073624).
• CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import (bsc#1073625).
• CVE-2017-17786: Fixed an out-of-bounds read in TGA (bsc#1073626).

It was discovered that GIMP incorrectly handled certain images. If a user were tricked into opening a specially crafted image, an attacker could possibly use this to execute arbitrary code. (CVE-2017-17784, CVE-2017-17785, CVE-2017-17786, CVE-2017-17787, CVE-2017-17788, CVE-2017-17789)

Hanno Böck discovered that GIMP allocated FLI images using only the information present in the file header, which allowed for a maliciously- crafted file to cause out-of-bounds writes. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-17785)

Michael Randrianantenaina discovered that that opening a maliciously crafted FLI file could cause GIMP to index out-of-bounds. An attacker could possibly use this issue to cause a denial or service or execute arbitrary code. (CVE-2025-2761)

It was discovered that opening a maliciously-crafted DCM file could cause GIMP to index out-of-bounds. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-10922)

It was discovered that GIMP's JP2 parser did not account for precision when allocating an image buffer. An attacker could possibly use this to cause a denial of service or execute arbitrary code when a maliciously crafted file is opened. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2025-14425)

It was discovered that GIMP's PSP parser erroneously queried the color channels of a greyscale image, which resulted in an invalid memory pointer. An attacker could possibly use this to cause a denial of service or execute arbitrary code when a maliciously-crafted file is opened. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2025-15059)