[Added] GIMP (Portable) - App-Request

OLLI_S

Name of the app:

GIMP (Portable)

File Path:

D:\PortableApps\PortableApps\GIMPPortable\App\gimp\bin\gimp-2.10.exe

Developer:

Spencer Kimball, Peter Mattis and the GIMP Development Team

Website:

https://www.gimp.org/

Download Site:

https://www.gimp.org/downloads/

Version number displayed in the app:

2.10.4 (this is the field Product Version String)

App-Icon: in ICO format

0_1533065277245_GIMP_Icon_256x256.ico

Here is the version information extracted from gimp-2.10.exe:

File name and path:     D:\PortableApps\PortableApps\GIMPPortable\App\gimp\bin\gimp-2.10.exe
Product Name:           GNU Image Manipulation Program
Internal Name:          gimp-2.10
Original Filename:      gimp-2.10.exe

File Description:       GNU Image Manipulation Program
Company:                Spencer Kimball, Peter Mattis and the GIMP Development Team
Legal Copyright:        Copyright Â© 1995-2018
Legal Trademarks:       
Comments:               

File Version String:    2.10.4.0
File Version:           2.10.4.0
Product Version String: 2.10.4
Product Version:        2.10.4.0

OLLI_S

Version 2.10.6 is now shown.
Issue solved!

Tom

Found a reference to the open vuln, it was fixed back in 2.10.0-RC1

States on versions 2.10.0 through 2.10.8 has been updated to reflect this

OLLI_S

OK, I mark it as fixed

Tom

@olli_s We can close it

OLLI_S

GIMP is detected correctly, issue seems to be solved.
@Tom should I close it or do you want to leave it opened (because of the filename issue)?

Tom

Also, detection will fail when they go to version 2.12 or whatever the next minor release is called, since they change the filename.
We will consider if this should be detected automatically, since there is a few apps that do it this way (though it mostly seems to be an old way of doing it).

Tom

Generic detection added.
However, GIMP seems to be vulnerable to this old vuln:
CVE-2017-17789 in file-psp.exe
There is no immediate announcements or entries in the changelog about this being fixed.
If someone has more information, please share it.