The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain CrntCode array index is not checked. This will lead to a denial of service or possibly unspecified other impact.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/104341 | Third Party Advisory VDB Entry |
https://github.com/pts/sam2p/issues/37 | Exploit Issue Tracking Third Party Advisory |
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E |
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 02:51
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
15 Mar 2021, 22:30
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://github.com/pts/sam2p/issues/37 - Exploit, Issue Tracking, Third Party Advisory | |
References | (MLIST) https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E - Mailing List, Third Party Advisory |
25 Feb 2021, 17:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2018-05-26 18:29
Updated : 2023-12-10 12:30
NVD link : CVE-2018-11489
Mitre link : CVE-2018-11489
CVE.ORG link : CVE-2018-11489
JSON object : View
Products Affected
sam2p_project
- sam2p
giflib_project
- giflib