Bug 374641

Summary:	media-gfx/gif2png: arbitrary code execution (CVE-2009-5018)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	major	CC:	graphics+disabled
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B2 [ebuild]
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2011-07-10 02:03:43 UTC

CVE-2009-5018 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-5018):
  Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might
  allow context-dependent attackers to execute arbitrary code via a long
  command-line argument, as demonstrated by a CGI program that launches
  gif2png.

Comment 1 Tim Sammut (RETIRED) gentoo-dev

2011-07-11 01:40:47 UTC


*** This bug has been marked as a duplicate of bug 346501 ***