NULL Pointer Dereference in GIMP via Malformed SBZ Palette

Executive Summary

This vulnerability is a NULL pointer dereference flaw in GIMP's SBZ palette importer. When a crafted SBZ palette file without a color-model attribute is imported, the parser leaves the color model as NULL. This causes a crash when the code tries to compare a NULL string in the swatchbooker_load_text() function, leading to denial of service.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor GIMP crashes during palette import operations. Check system logs for segmentation faults or NULL pointer dereference errors when GIMP processes SBZ files. No specific commands are provided in the resources, but inspecting GIMP logs after importing palette files may reveal the issue.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can cause GIMP to crash when importing a malicious SBZ palette file. It requires user interaction, meaning an attacker must trick you into opening the file. The impact is limited to local denial of service and does not allow remote code execution or unauthorized access.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability causes a denial of service in GIMP by crashing the application when importing a crafted SBZ palette file. It does not directly affect data confidentiality or integrity, which are key concerns for GDPR and HIPAA compliance. However, repeated crashes could disrupt workflows handling sensitive data, potentially impacting operational compliance.

Useful 0 Not Useful 0

Mitigation Strategies

Avoid importing untrusted SBZ palette files in GIMP. If GIMP is not required, consider removing the package. Apply patches or updates from GIMP developers once available. Monitor vendor advisories for official fixes.

Useful 0 Not Useful 0