CVE-2012-2763
GIMP < 2.6.13 - Remote Code Execution via Long String in Script-Fu Server Command
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2012-2763.
PoCs published by Metasploit, Joseph Sheridan, Joseph Sheridan, juan vazquez, including Metasploit module exploits/windows/misc/gimp_script_fu.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in GIMP's script-fu server (CVE-2012-2763) by sending a crafted packet to achieve remote code execution. It targets specific GIMP versions on Windows and leverages a stack-based overflow to overwrite function pointers.
Description
Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long string in a command to the script-fu server.
Exploits (3)
This Metasploit module exploits a buffer overflow in GIMP's script-fu server (CVE-2012-2763) by sending a crafted packet to achieve remote code execution. It targets specific GIMP versions on Windows and leverages a stack-based overflow to overwrite function pointers.
This exploit demonstrates a buffer overflow in the script-fu server component of GIMP 2.6, allowing an attacker to overwrite function pointers and potentially execute arbitrary code. The PoC sends a crafted message to the script-fu server, triggering the overflow.
This Metasploit module exploits a buffer overflow in GIMP's script-fu server (CVE-2012-2763) by sending a crafted packet to overwrite function pointers in the .bss section, leading to remote code execution. The exploit targets specific GIMP versions on Windows and includes payload generation and delivery.