IT security researchers have discovered a security vulnerability in the current version of GIMP. When processing manipulated ICO files, the graphics software can fail and execute malicious code.