CVE-2012-3481

CVE-2012-3481 describes an integer overflow vulnerability in the GIF image format plug-in within GIMP 2.8.x and earlier versions. This flaw, specifically in the ReadImage function, allows remote attackers to trigger a denial of service (application crash) and potentially execute arbitrary code through a heap-based buffer overflow by supplying a crafted GIF image with manipulated height and len properties. The vulnerability has a CVSS score of 6.8, indicating a medium severity with a network-based attack vector, medium attack complexity, and potential for partial confidentiality, integrity, and availability impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.