Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 374641 - media-gfx/gif2png: arbitrary code execution (CVE-2009-5018)
Summary: media-gfx/gif2png: arbitrary code execution (CVE-2009-5018)
Status: RESOLVED DUPLICATE of bug 346501
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal major (vote)
Assignee: Gentoo Security
URL:
Whiteboard: B2 [ebuild]
Keywords:
Depends on:
Blocks:
 
Reported: 2011-07-10 02:03 UTC by GLSAMaker/CVETool Bot
Modified: 2011-07-11 01:40 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description GLSAMaker/CVETool Bot gentoo-dev 2011-07-10 02:03:43 UTC 
CVE-2009-5018 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-5018):
  Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might
  allow context-dependent attackers to execute arbitrary code via a long
  command-line argument, as demonstrated by a CGI program that launches
  gif2png.
Comment 1 Tim Sammut (RETIRED) gentoo-dev 2011-07-11 01:40:47 UTC 

*** This bug has been marked as a duplicate of bug 346501 ***