HIGH🇵🇱 Wersja polska

CVE-2018-11489

CVSS 8.8v3.1pub. 2018-05-26upd. 2024-11-21

The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain CrntCode array index is not checked. This will lead to a denial of service or possibly unspecified other impact.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Giflib Project Giflib

    APP
    Giflib Project
    3.0 – 3.1.1

  • Sam2p Project Sam2p

    APP
    Sam2P Project
    0.49.4
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoSMemory
CWE
References

Related vulnerabilities

CVE-2018-12601CRITICAL9.8ten sam produkt

There is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of s...

CVE-2018-12578CRITICAL9.8ten sam produkt

There is a heap-based buffer overflow in bmp_compress1_row in appliers.cpp in sam2p 0.49.4 that leads to a den...

CVE-2018-7552CRITICAL9.8ten sam produkt

There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sa...

CVE-2018-7551CRITICAL9.8ten sam produkt

There is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in sam2p 0.49.4. ...

CVE-2018-7553CRITICAL9.8ten sam produkt

There is a heap-based buffer overflow in the pcxLoadRaster function of in_pcx.cpp in sam2p 0.49.4. A crafted i...