CVE-2009-3909

CVE-2009-3909 describes an integer overflow vulnerability in the GIMP 2.6.7 image editor, specifically within the read_channel_data function when processing PSD files. This flaw could lead to a heap-based buffer overflow, potentially allowing remote attackers to execute arbitrary code by enticing a user to open a specially crafted PSD file. With a CVSS score of 9.3, this vulnerability is considered critical due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.