CVE-2017-1000421

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-1000421
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000421.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-1000421
Downstream
Related
Published
2018-01-02T19:29:00.300Z
Modified
2026-03-14T01:38:43.915971Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code execution

References

Affected packages

Git / github.com/kohler/gifsicle

Affected ranges

Type
GIT
Repo
https://github.com/kohler/gifsicle
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8a9125273aa4f86f55a6c50c0d3baaac6a9e8076
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.89"
        }
    ]
}

Affected versions

v1.*
v1.10
v1.10b1
v1.11
v1.11.1
v1.14.1
v1.15b
v1.18
v1.19
v1.21
v1.22
v1.24
v1.25
v1.26
v1.30
v1.35
v1.37
v1.38
v1.39
v1.40
v1.42
v1.43
v1.44
v1.45
v1.46
v1.47
v1.48
v1.50
v1.51
v1.52
v1.53
v1.54
v1.55
v1.56
v1.57
v1.58
v1.59
v1.60
v1.61
v1.62
v1.63
v1.64
v1.65
v1.66
v1.67
v1.68
v1.69
v1.70
v1.71
v1.72
v1.73
v1.74
v1.75
v1.76
v1.77
v1.78
v1.79
v1.80
v1.81
v1.82
v1.84
v1.85
v1.86
v1.87
v1.88
v1.89

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000421.json"