The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain "Private->RunningCode - 2" array index is not checked. This will lead to a denial of service or possibly unspecified other impact.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "giflib-dbg", "binary_version": "5.1.4-0.3~16.04.1" }, { "binary_name": "giflib-tools", "binary_version": "5.1.4-0.3~16.04.1" }, { "binary_name": "giflib-tools-dbgsym", "binary_version": "5.1.4-0.3~16.04.1" }, { "binary_name": "libgif-dev", "binary_version": "5.1.4-0.3~16.04.1" }, { "binary_name": "libgif-dev-dbgsym", "binary_version": "5.1.4-0.3~16.04.1" }, { "binary_name": "libgif7", "binary_version": "5.1.4-0.3~16.04.1" }, { "binary_name": "libgif7-dbgsym", "binary_version": "5.1.4-0.3~16.04.1" } ], "ubuntu_priority": "low" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "giflib-tools", "binary_version": "5.1.4-2ubuntu0.1" }, { "binary_name": "giflib-tools-dbgsym", "binary_version": "5.1.4-2ubuntu0.1" }, { "binary_name": "libgif-dev", "binary_version": "5.1.4-2ubuntu0.1" }, { "binary_name": "libgif7", "binary_version": "5.1.4-2ubuntu0.1" }, { "binary_name": "libgif7-dbgsym", "binary_version": "5.1.4-2ubuntu0.1" } ], "ubuntu_priority": "low" }