Daniel Kazimirow

The issue allows remote attackers to execute arbitrary code via crafted parameters in a GNI file, specifically through display properties or conditional bitmap parameters.

The issue is related to a buffer overflow that can be triggered by a crafted AWD file, potentially allowing remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.

The issue allows user-assisted remote attackers to cause a denial of service and execute arbitrary code via a long string in a version attribute of an `ispXCF` element in an `.xcf` file.