PT-2018-3817 · Giflib+4 · Giflib+4
Xin-Jiang
·
Publicado
2018-05-24
·
Atualizado
2024-06-15
·
CVE-2018-11490
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
GIFLIB versions 3.0.x
sam2p version 0.49.4
Description
The issue is related to a heap-based buffer overflow in the DGifDecompressLine function due to an un-checked array index
Private->RunningCode - 2. This could lead to a denial of service or other unspecified impact. The vulnerability can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.Recommendations
For GIFLIB versions 3.0.x, consider disabling the
DGifDecompressLine function until a patch is available.
For sam2p version 0.49.4, restrict access to the DGifDecompressLine function in the cgif.c component to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.DoS
Improper Validation of Array Index
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Astra Linux
Giflib
Suse
Ubuntu
Sam2P