2012-08-31 20:55:05 2016-12-03 03:59:54

The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via the python-fu-eval command.