Red Hat Security AdvisoryRHSA-2009:0444
giflib security update
Released 2009-04-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) giflib-4.1.3-7.1.el5_3.1, giflib-4.1.3-7.1.el5_3.1.i386, giflib-4.1.3-7.1.el5_3.1.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) giflib-4.1.3-7.1.el5_3.1, giflib-4.1.3-7.1.el5_3.1.i386, giflib-utils-4.1.3-7.1.el5_3.1 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) giflib-4.1.3-7.1.el5_3.1, giflib-devel-4.1.3-7.1.el5_3.1, giflib-devel-4.1.3-7.1.el5_3.1.i386
Fixes 2 records
Priority MEDIUM 40
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04418 · Published 2005-11-04 · Fixed
Priority LOW 18
libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02583 · Published 2005-11-04 · Fixed
