Lucene search
UbuntuUSN-214-1HistoryNov 07, 2005 - 12:00 a.m.
libungif vulnerabilities
2005-11-0700:00:00
ubuntu.com
32
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.033 Low
EPSS
Percentile
91.4%
Releases
- Ubuntu 5.04
- Ubuntu 4.10
Details
Chris Evans discovered several buffer overflows in the libungif
library. By tricking an user (or automated system) into processing a
specially crafted GIF image, this could be exploited to execute
arbitrary code with the privileges of the application using libungif.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 5.04 | noarch | libungif4g | < * | UNKNOWN |
| Ubuntu | 4.10 | noarch | libungif4g | < * | UNKNOWN |
Related
redhat
redhat
(RHSA-2005:828) libungif security update
2005-11-03 00:00:00
(RHSA-2009:0444) Important: giflib security update
2009-04-22 00:00:00
nessus
nessus
Oracle Linux 5 : giflib (ELSA-2009-0444)
2013-07-12 00:00:00
CentOS 5 : giflib (CESA-2009:0444)
2010-01-06 00:00:00
Mandrake Linux Security Advisory : libungif (MDKSA-2005:207)
2006-01-15 00:00:00
gentoo
gentoo
giflib: Multiple vulnerabilities
2005-11-04 00:00:00
openvas
openvas
Debian Security Advisory DSA 890-1 (libungif4)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200511-03 (giflib)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200511-03 (giflib)
2008-09-24 00:00:00
centos
centos
giflib security update
2009-04-23 20:53:06
libungif security update
2005-11-03 22:20:29
libungif security update
2005-11-03 19:24:03
securityvulns
securityvulns
[Full-disclosure] [ GLSA 200511-03 ] giflib: Multiple vulnerabilities
2005-11-04 00:00:00
osv
osv
libungif4 - several
2005-11-09 00:00:00
debian
debian
[SECURITY] [DSA 890-1] New libungif4 packages fix several vulnerabilities
2005-11-09 09:14:32
[SECURITY] [DSA 890-1] New libungif4 packages fix several vulnerabilities
2005-11-09 09:14:32
oraclelinux
oraclelinux
giflib security update
2009-04-22 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: giflib-4.1.3-10.fc9
2009-05-19 02:09:16
[SECURITY] Fedora 10 Update: giflib-4.1.6-2.fc10
2009-06-18 11:39:31
ubuntucve
ubuntucve
CVE-2005-3350
2005-11-03 00:00:00
CVE-2005-2974
2005-11-03 00:00:00
cvelist
cvelist
CVE-2005-3350
2005-11-04 00:00:00
CVE-2005-2974
2005-11-04 00:00:00
nvd
nvd
CVE-2005-3350
2005-11-04 00:02:00
CVE-2005-2974
2005-11-04 00:02:00
cve
cve
CVE-2005-3350
2005-11-04 00:02:00
CVE-2005-2974
2005-11-04 00:02:00
debiancve
debiancve
CVE-2005-3350
2005-11-04 00:02:00
CVE-2005-2974
2005-11-04 00:02:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.033 Low
EPSS
Percentile
91.4%
Related for USN-214-1