Description

Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code execution

Remediation

References

https://github.com/kohler/gifsicle/issues/114

https://lists.debian.org/debian-lts-announce/2018/01/msg00006.html

https://www.debian.org/security/2018/dsa-4084

Related Vulnerabilities

CVE-2023-34465 Vulnerability in maven package org.xwiki.platform:xwiki-platform-security-authorization-bridge

CVE-2022-0436 Vulnerability in maven package org.webjars.npm:grunt

CVE-2022-45208 Vulnerability in maven package org.jeecgframework.boot:jeecg-module-system

CVE-2019-20365 Vulnerability in maven package org.igniterealtime.openfire:xmppserver

CVE-2020-19676 Vulnerability in maven package com.alibaba.nacos:nacos-api

Severity

Critical

Classification

CWE-416 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Issue Tracking Patch Third Party Advisory Mailing List