48 matches found
CVE-2021-44179
Adobe Dimension versions 3.4.3 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...
Denial of service
Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted GIF image...
DEBIAN-CVE-2015-7506
The gifnextLZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service out-of-bounds read and application crash via a crafted LZW stream in a GIF file...
CVE-2012-6306
A vulnerability exists in HCView aka Hardcoreview 1.4 due to a write access violation with a GIF file...
CVE-2017-12804
The iwgifinitscreen function in imagew-gif.c:510 in ImageWorsener 1.3.2 allows remote attackers to cause a denial of service hmemory exhaustion via a crafted file...
The vulnerability of the read_gif function in the software for viewing GIF files, gifview – a software package for creating, editing, and optimizing GIF files, Gifsicle – allows a hacker to execute arbitrary code.
The vulnerability of the readgif function in the software for viewing GIF files, gifview, a program package for creating, editing, and optimizing GIF files in Gifsicle, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker, operating remotely, to...
PHP CVE-2018-5711 - Hanging Websites by a Harmful GIF
Recently, I reviewed several Web frameworks and language implementations, and found some vulnerabilities. This is an simple and interesting case, and seems easy to exploit in real world! Affected All PHP version PHP 5 firstcode = sd-oldcode = 461 GetCodefd, &sd-scd, sd-codesize, FALSE,...
DEBIAN-CVE-2018-5711
gdgifin.c in the GD Graphics Library aka libgd, as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or...
DEBIAN-CVE-2017-16938
A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file...
ImageWorsener Denial of Service Vulnerability (CNVD-2017-07746)
ImageWorsener is a set of image scaling and processing utilities. A denial of service vulnerability exists in the 'lzwaddtodict' function in the imagew-gif.c file of libimageworsener.a in ImageWorsener version 1.3.1. A remote attacker can exploit this vulnerability to cause a denial of service...
CVE-2017-7940
The iwreadgiffile function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of available memory via a crafted file...
Memory corruption
The iwreadgiffile function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of available memory via a crafted file...
Pornhub: XSS vulnerability using GIF tags
The researcher discovered a way to use the tag parameter when generating a GIF to achieve a stored cross-site scripting...
UBUNTU-CVE-2015-8808
The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service uninitialized memory access via a crafted GIF file...
Autodesk Design Review GIF GlobalColorTable Remote Code Execution Vulnerability
Autodesk Design Review is free DWF viewer software. A security vulnerability exists in Autodesk Design Review's handling of GIF files due to the rendering of GlobalColorTable when not specified. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current...
UBUNTU-CVE-2014-9709
The GetCode function in gdgifin.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function...
plug-in): Heap-based buffer overflow by loading certain GIF images
Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted height and len properties in a GIF image...
CentOS Update for gd CESA-2008:0146 centos4 i386
Check for the Version of gd OpenVAS Vulnerability Test CentOS Update for gd CESA-2008:0146 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Mozilla FireFox <= 1.0.1 Remote GIF Heap Overflow Exploit
No description provided by source. / Mozilla FireFox = 1.0.1 Remote GIF Heap Overflow Exploit by Darkeagle of uKt Researcherz darkeagle at linkin-park dot cc greetz to all my friends 8 and... Happy Birthday uKt research team 8 1 year 8 http://unl0ck.org !!!-script kiddie edition-!!!...
CVE-2008-0985
Heap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3-rc37a and earlier allows remote attackers to execute arbitrary code via a crafted GIF file whose logical screen height and width are different than the actual height and width...