Summary
It was discovered that Gifsicle did not properly handle certain input. If a
user were tricked into opening a malicious GIF, an attacker could
potentially execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | gifsicle | 1.78-1ubuntu0.1~esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | gifsicle | 1.88-1ubuntu0.1~esm1 |
Vulnerabilities 2
-
Unscored —
Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code exe…
-
Unscored —
A double-free bug in the read_gif function in gifread.c in gifsicle 1.90 allows a remote attacker to cause a denial-of-…