PT-2012-5273
CVE-2012-4245
·
تاريخ النشر
2012-08-31
·
تاريخ التحديث
2022-02-07
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
GIMP version 2.6
Description
The issue concerns the scriptfu network server in GIMP, which does not require authentication. This allows remote attackers to execute arbitrary commands via the python-fu-eval command.
Recommendations
For GIMP version 2.6, consider disabling the scriptfu network server until a patch is available to prevent remote attackers from executing arbitrary commands.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾