A vulnerability was identified in dloebl CGIF up to 0.5.2. This vulnerability affects the function cgif_addframe of the file src/cgif.c of the component GIF Image Handler. The manipulation of the argument width/height leads to integer overflow.
The attack may be initiated remotely. The identifier of the patch is b0ba830093f4317a5d1f345715d2fa3cd2dab474. It is suggested to install a patch to address this issue.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
Passive
Minimal interaction
Impact Assessment
Confidentiality
None
No data leak
Integrity
None
No data modification
Availability
Low
Partial disruption
CVSS Vector v4.0
Weakness Type (CWE)
References 7
https://github.com/dloebl/cgif/
cna@vuldb.com
https://github.com/dloebl/cgif/commit/b0ba830093f4317a5d1f345715d2fa3cd2dab474
cna@vuldb.com
https://github.com/dloebl/cgif/issues/110
cna@vuldb.com
https://github.com/dloebl/cgif/pull/112
cna@vuldb.com
https://vuldb.com/?ctiid.353874
cna@vuldb.com
https://vuldb.com/?id.353874
cna@vuldb.com
https://vuldb.com/?submit.778278
cna@vuldb.com