oss-security - Re: CVE Request: gif2png: command-line buffer overflow problem

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <910412384.111291290442657866.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Mon, 22 Nov 2010 11:17:37 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley <coley@...re.org>
Subject: Re: CVE Request: gif2png: command-line buffer
 overflow problem

Steve,

I don't have any 2009 IDs. Can you take this one.

Thanks.

-- 
    JB


----- "Kurt Seifried" <kurt@...fried.org> wrote:

> This is from 2009 but doesn't appear to have a CVE (no "gif2png" in
> the CVE database).
> 
> Sources:
> https://bugzilla.redhat.com/show_bug.cgi?id=547515
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550978
> http://lists.grok.org.uk/pipermail/full-disclosure/2009-December/072009.html
> 
> Description:
> A buffer overflow in gif2png 2.5.3 and earlier allows an attacker to
> execute arbitrary code via a long command line argument passed to the
> gif2png binary.
> 
> It was first claimed that it was fixed in 2.5.2 but it is reported
> that it isn't fixed, I tested 2.5.3 and it still seg faults the same
> way as 2.5.2 so it would appear it was never fixed, as the software
> was last updated in 2005 I guess this one never gets fixed.
> 
> -- 
> Kurt Seifried
> kurt@...fried.org
> tel: 1-703-879-3176

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.