This vulnerability in GIMP arises from the Lighting Effects filter failing to properly validate the number of light sources in a lighting preset file. This flaw allows an out-of-bounds write, corrupting memory and potentially enabling arbitrary code execution or causing a denial-of-service crash. The vulnerability is exploitable by convincing a user to open a maliciously crafted preset file. Red Hat has published an advisory confirming the issue for Red Hat Enterprise Linux 6 but currently does not provide a fix or effective mitigation that meets their criteria.

Successful exploitation can lead to high-impact consequences including complete confidentiality, integrity, and availability compromise of the affected system. Specifically, memory corruption may allow arbitrary code execution or cause the application to crash, resulting in denial of service. The attack requires local access with user interaction (opening a malicious file).

Red Hat currently does not offer a fix or mitigation that meets their criteria for ease of use, deployment, and stability. Users are advised to avoid opening untrusted lighting preset files in GIMP. Monitoring Red Hat's advisory for updates or patches is recommended. Consider upgrading to a supported product version if available that addresses this vulnerability.