Security flaw found in GIMP! Avoid opening this file type until it's fixed

It would be stupid anyway if a simple icon, an .ico file, could totally compromise your system, don't you think? And yet, this is exactly the nightmare that the tens of millions of users of the Gimp graphics software are experiencing. Indeed, security researchers at Trend Micro have identified a critical vulnerability (CVSS score 7.8) that allows remote code execution by opening a maliciously designed ICO file.

Security flaw found in GIMP! Avoid opening this file type until it's fixed

The current edition of GIMP (version 3.0.2) has a security vulnerability that could be exploited to inject malicious code. The developers released GIMP 3.0 back in March, then followed it up a week later with version 3.0.2. A more recent update is not yet available. Security researchers from the Trend Micro Zero Day Initiative (ZDI) have discovered a security vulnerability in GIMP 3.0.2, which they’ve labeled ZDI-CAN-26752. (A CVE ID is not yet …