Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-17786
7.8
HIGHCVSS v3
Published
December 20, 2017
CVSS v2
6.8 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA image.
GitHubGIMP
ChocolateyGIMP is a multi-platform photo manipulation tool. GIMP is an acronym for GNU Image Manipulation Program. The GIMP is suitable for a variety of image manipulation tasks, including photo retouching, image composition, and image construction.It can be used as a simple paint program, an expert quality photo retouching program, an online batch processing system, a mass production image renderer, an image format converter, etc.
GIMP is expandable and extensible. It is designed to be augmented with plug-ins and extensions to do just about anything. The advanced scripting interface allows everything from the simplest task to the most complex image manipulation procedures to be easily scripted.
## Features
- High Quality Photo Manipulation: retouching, restoring to creative composites etc.
- Original Artwork Creation: power and flexibility to transform images into unique creations.
- Graphic Design Elements: gIMP is used for producing icons, graphical design elements, and art for user interface components and mockups.
- Programming Algorithms: high quality framework for scripted image manipulation, with multi-language support such as C, C++, Perl, Python, Scheme, and more
- Desktop Publishing Workflow: color management features to ensure high-fidelity color reproduction across digital and printed media.
- [More features...](https://www.gimp.org/features)
## Notes
- **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**
ChocolateyGIMP is a multi-platform photo manipulation tool. GIMP is an acronym for GNU Image Manipulation Program. The GIMP is suitable for a variety of image manipulation tasks, including photo retouching, image composition, and image construction.It can be used as a simple paint program, an expert quality photo retouching program, an online batch processing system, a mass production image renderer, an image format converter, etc.
GIMP is expandable and extensible. It is designed to be augmented with plug-ins and extensions to do just about anything. The advanced scripting interface allows everything from the simplest task to the most complex image manipulation procedures to be easily scripted.
## Features
- High Quality Photo Manipulation: retouching, restoring to creative composites etc.
- Original Artwork Creation: power and flexibility to transform images into unique creations.
- Graphic Design Elements: gIMP is used for producing icons, graphical design elements, and art for user interface components and mockups.
- Programming Algorithms: high quality framework for scripted image manipulation, with multi-language support such as C, C++, Perl, Python, Scheme, and more
- Desktop Publishing Workflow: color management features to ensure high-fidelity color reproduction across digital and printed media.
- [More features...](https://www.gimp.org/features)
## Notes
- **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**