CVE-2009-3909

Integer overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a crafted PSD file that triggers a heap-based buffer overflow.

Date published : 2009-11-18

http://www.securityfocus.com/bid/37040

http://www.securityfocus.com/archive/1/507928/100/0/threaded