gif2png command line buffer overflow
| census ID: | census-2009-0006 |
| CVE ID: | CVE-2009-5018 |
| Affected Products: | gif2png versions ≤ 2.5.1. |
| Class: | Improper Input Validation (CWE-20), Failure to Constrain Operations within the Bounds of a Memory Buffer (CWE-119) |
| Remote: | Yes (when gif2png is used by CGI programs) |
| Discovered by: | Patroklos Argyroudis |
We have discovered an “improper input validation” vulnerability in the gif2png utility that leads to a stack buffer overflow.
read more...