OSVDB ID: 20470 Title: libungif/giflib Malformed .gif File NULL Dereference DoS |
Info |
|
|
Dates |
||||
|
|
Description |
libungif contains a flaw that may allow a remote denial of service. The issue is triggered when a program using libungif opens a specially crafted GIF file. Due to a flaw in the library, this may cause the ColorMaps value incorrectly when freeing a colormap object, and will result in the program crashing with a NULL dereference. |
Classification |
Location:
Remote / Network Access
Attack Type: Denial of Service Impact: Loss of Availability Exploit: Exploit Unknown Disclosure: OSVDB Verified, Vendor Verified |
Solution |
Upgrade to version 4.1.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
Credit |
|
scary.beasts.org -