CVE-2007-2356: Gimp

Medium severity, CVSS 6.8. EPSS: 15.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.

Affected products

• Gimp Gimp: version 2.2.14 only

Published 2007-04-30. Last modified 2026-06-16.