Lucene search

K
freebsdFreeBSDB1BCAB7D-1880-11DD-A914-0016179B2DD5
HistoryJan 24, 2008 - 12:00 a.m.

sdl_image -- buffer overflow vulnerabilities

2008-01-2400:00:00
vuxml.freebsd.org
20

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.165 Low

EPSS

Percentile

95.9%

Secunia reports:

Two vulnerabilities have been reported in SDL_image, which can be
exploited by malicious people to cause a Denial of Service or potentially
compromise an application using the library.
A boundary error within the LWZReadByte() function in IMG_gif.c can
be exploited to trigger the overflow of a static buffer via a
specially crafted GIF file.
A boundary error within the “IMG_LoadLBM_RW()” function in IMG_lbm.c
can be exploited to cause a heap-based buffer overflow via a specially
crafted IFF ILBM file.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchsdl_image< 1.2.6_1UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.165 Low

EPSS

Percentile

95.9%

Related for B1BCAB7D-1880-11DD-A914-0016179B2DD5