{"id":"CVE-2007-2356","url":"https://www.cyber-defence.io/tools/cve/CVE-2007-2356","generatedAt":"2026-10-27T19:38:46.319Z","title":"Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.","description":"Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.","published":"2007-04-30T22:19:00.000Z","lastModified":"2026-06-16T22:39:26.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":6.8,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P"},"cwe":["CWE-787"],"affected":["gimp/gimp"],"epss":{"score":0.15674,"percentile":0.96828,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":2,"verified":true,"firstPublished":"2007-04-26","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":3888,"kind":"exploit","title":"GIMP 2.2.14 (Windows x86) - '.ras' Download/Execute Buffer Overflow","url":"https://www.exploit-db.com/exploits/3888","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows_x86/local/3888.c","file":"exploits/windows_x86/local/3888.c","published":"2007-05-09","added":"2007-05-08","updated":"2017-01-31","author":"Kristian Hermansen","type":"local","platform":"windows_x86","port":null,"verified":true,"codes":["OSVDB-35417","CVE-2007-2356"],"tags":null,"aliases":null,"applicationUrl":"http://www.exploit-db.comgimp-2.2.14-i586-setup.exe","screenshotUrl":null,"referenceUrl":null},{"edbId":3801,"kind":"exploit","title":"GIMP 2.2.14 - '.ras' SUNRAS Plugin Buffer Overflow","url":"https://www.exploit-db.com/exploits/3801","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/3801.c","file":"exploits/windows/local/3801.c","published":"2007-04-26","added":"2007-04-25","updated":null,"author":"Marsu","type":"local","platform":"windows","port":null,"verified":true,"codes":["OSVDB-35417","CVE-2007-2356"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 15.7%, higher than 97% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25012","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25111","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25167","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25239","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25346","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25359","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25466","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25573","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28114","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200705-08.xml","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1","tags":["Broken Link","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201320-1","tags":["Broken Link","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2007/dsa-1301","tags":["Patch","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:108","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0343.html","tags":["Patch","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/467231/100/0/threaded","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/23680","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1018092","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-467-1","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/1560","tags":["Broken Link","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/4241","tags":["Broken Link","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=238422","tags":["Issue Tracking","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33911","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-1318","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10054","tags":["Tool Signature"],"source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5960","tags":["Tool Signature"],"source":"cve@mitre.org"},{"url":"http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25012","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25111","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25167","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25239","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25346","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25359","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25466","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25573","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28114","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200705-08.xml","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1","tags":["Broken Link","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201320-1","tags":["Broken Link","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2007/dsa-1301","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:108","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0343.html","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/467231/100/0/threaded","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/23680","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1018092","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-467-1","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/1560","tags":["Broken Link","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/4241","tags":["Broken Link","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=238422","tags":["Issue Tracking","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33911","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1318","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10054","tags":["Tool Signature"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5960","tags":["Tool Signature"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-2356","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}