CVE-2007-2356
Gimp 2.2.14 - Stack-Based Buffer Overflow in SUNRAS Plugin via RAS File
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-2356. PoCs published by Kristian Hermansen, Marsu.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in GIMP 2.2.14 by crafting a malicious RAS file that triggers arbitrary code execution via a call to ESP in libgimpcolor-2.0-0.dll. The payload is designed to download and execute a remote file.
Description
Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.
Exploits (2)
This exploit targets a buffer overflow vulnerability in GIMP 2.2.14 by crafting a malicious RAS file that triggers arbitrary code execution via a call to ESP in libgimpcolor-2.0-0.dll. The payload is designed to download and execute a remote file.
This exploit targets a buffer overflow vulnerability in the SUNRAS plugin of GIMP v2.2.14, specifically in the `set_color_table` function. It includes shellcode for both launching calc.exe and binding a shell to port 4444.