CVE-2005-3350: libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write | LiveThreat CVE Feed — Verisq

Login Request a demo

Unscored severity · published Nov 4, 2005

CVE-2005-3350

libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write

–

CVSS

4.4%

EPSS

No

On KEV

Description

libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.

Exploitation

Is it being used?

Exploit prediction (EPSS)4.4% · higher than 91% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

LI

Libungif · Libungif

through 4.1; 4.1.3 · source: NVD

Affected product

LI

Libungif

Libungif

All Libungif CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-2005-3350

https://www.cve.org/CVERecord?id=CVE-2005-3350

bugs.gentoo.org

http://bugs.gentoo.org/show_bug.cgi?id=109997

scary.beasts.org

http://scary.beasts.org/security/CESA-2005-007.txt

http://secunia.com/advisories/17436

http://secunia.com/advisories/17438

http://secunia.com/advisories/17442

http://secunia.com/advisories/17462

More from Libungif

–

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference