VulnerabilityModified
CVE-2018-12713
This might be leveraged by attackers to overwrite files or read file content that was intended to be private.
CRITICAL 9.1EPSS 1.95%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.95%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_write_and_read_file function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was intended to be private.
- CVSS 3.1
- 9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- EPSS
- 1.95% probability · 79th percentile
- CISA KEV
- Not listed
- Affected
- gimp/gimp
- Source
- cve@mitre.org
References
- https://github.com/GNOME/gimp/commit/c21eff4b031acb04fb4dfce8bd5fdfecc2b6524fPatch, Third Party Advisory
- https://gitlab.gnome.org/GNOME/gimp/issues/1689Issue Tracking, Third Party Advisory
- https://github.com/GNOME/gimp/commit/c21eff4b031acb04fb4dfce8bd5fdfecc2b6524fPatch, Third Party Advisory
- https://gitlab.gnome.org/GNOME/gimp/issues/1689Issue Tracking, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.