The (1) psp (aka .tub) (2) bmp (3) pcx and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (crash or memory consumption) via crafted image files as discovered using the fusil fuzzing tool.