PT-2019-3240 · Giflib+3 · Giflib+3
Publicado
2019-02-09
·
Atualizado
2024-06-15
·
CVE-2019-15133
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
GIFLIB versions prior to 2019-02-16
Description
The issue is related to errors in division by zero in the DGifSlurp function of the GIFLIB library, which handles GIF files. This can be triggered by a malformed GIF file where the height field of the ImageSize data structure is equal to zero. Exploitation of this issue may allow a remote attacker to cause a denial of service.
Recommendations
For GIFLIB versions prior to 2019-02-16, update to a version released after 2019-02-16 to resolve the issue. As a temporary workaround, consider restricting the use of the DGifSlurp function in dgif lib.c until a patch is available. Avoid using the library to process untrusted or malformed GIF files until the issue is resolved.
Correção
Divide By Zero
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Giflib
Suse
Ubuntu