Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-4694

Опубликовано: 14 янв. 2011
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output files, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:catb:gif2png:*:*:*:*:*:*:*:*
Версия до 2.5.3 (включая)
cpe:2.3:a:catb:gif2png:0.99:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.1.3:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.2.2:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.2.3:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.2.4:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.2.5:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.3.0:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.3.1:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.3.2:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.3.3:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.4.3:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.4.4:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.4.5:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.4.6:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.4.7:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.5.0:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:catb:gif2png:2.5.2:*:*:*:*:*:*:*

EPSS

Процентиль: 88%
0.03901
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
почти 15 лет назад

Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output files, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.

redhat
около 16 лет назад

Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output files, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.

debian
почти 15 лет назад

Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow ...

github
больше 3 лет назад

Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output files, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.

EPSS

Процентиль: 88%
0.03901
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119