11 matches found
EUVD-2020-11650
Malware in sbrugna...
EUVD-2017-9257
Malware in sbrugna...
EUVD-2017-1558
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2023-46009
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c. CVE-2023-46009 Note that Nessus relies on the...
DEBIAN-CVE-2023-44821
Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect GifRealloc calls, might allow a denial of service memory consumption. NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arriv...
gifsicle Security Breach
gifsicle is Gifsicle's handling of GIF image files. A security vulnerability exists in gifsicle version v.1.92, which stems from a vulnerability that allows an attacker to cause a denial of service attack via the --crop parameter in a command line argument...
CVE-2023-44821
Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect GifRealloc calls, might allow a denial of service memory consumption. NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arriv...
CVE-2023-36193
Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguityerror component at /src/clp.c...
Denial Of Service (DoS)
gifsicle is vulnerable to denial of service. The findcolororerror function in gifsicle contains a NULL pointer dereference...
USN-4803-1 gifsicle vulnerabilities
It was discovered that Gifsicle did not properly handle certain input. If a user were tricked into opening a malicious GIF, an attacker could potentially execute arbitrary code...
DEBIAN-CVE-2017-18120
A double-free bug in the readgif function in gifread.c in gifsicle 1.90 allows a remote attacker to cause a denial-of-service attack or unspecified other impact via a maliciously crafted file, because lastname is mishandled, a different vulnerability than CVE-2017-1000421...