A heap-based buffer overflow vulnerability exists in GIMP's parsing of XWD files. This flaw allows remote attackers to execute arbitrary code if a user opens a maliciously crafted XWD file or visits a malicious page. Exploitation requires user interaction. The vulnerability arises from improper validation of the length of user-supplied data before copying it to a heap buffer.