Comment 4 for bug 185782

Revision history for this message
Andreas Wenning (andreas-wenning) wrote : Re: Buffer overflow in GIF handling

References:
 DSA-1493-1 (http://www.debian.org/security/2008/dsa-1493)
Quoting:
 "Several local/remote vulnerabilities have been discovered in the image
 loading library for the Simple DirectMedia Layer 1.2. The Common
 Vulnerabilities and Exposures project identifies the following problems:
CVE-2007-6697
    Gynvael Coldwind discovered a buffer overflow in GIF image parsing,
     which could result in denial of service and potentially the
     execution of arbitrary code.
CVE-2008-0544
    It was discovered that a buffer overflow in IFF ILBM image parsing
     could result in denial of service and potentially the execution of
     arbitrary code."