Untriaged
The gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent …
The gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted LZW stream in a GIF file.
References
- http://seclists.org/fulldisclosure/2015/Dec/70 x_refsource_MISC
- http://seclists.org/fulldisclosure/2015/Dec/70 x_transferred x_refsource_MISC
- http://seclists.org/fulldisclosure/2015/Dec/70 x_refsource_MISC
- http://seclists.org/fulldisclosure/2015/Dec/70 x_transferred x_refsource_MISC
Affected products
Libnsgif
- ==0.1.2
Package maintainers
-
@fgaz Francesco Gazzetta <fgaz@fgaz.me>