CVEvulnerability
CVE-2021-45972
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-01-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-1284
Description
The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. This allows an attacker to overwrite up to 250 bytes outside of the allocated buffer with arbitrary data.
Affected configurations
• giftrans project giftrans 1.12.2
• debian debian linux 9.0
• debian debian linux 10.0
• debian debian linux 11.0
Related
Weakness · CWE (1)
- CWE-1284 Improper Validation of Specified Quantity in Input weakness
References
- http://web.archive.org/web/20150801185019/ Broken Link
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002739 Exploit, Mailing List, Third Party Advisory
- https://www.abdn.ac.uk/tools/ibmpc/giftrans/index.hti Broken Link
- http://web.archive.org/web/20150801185019/ Broken Link
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002739 Exploit, Mailing List, Third Party Advisory
- https://www.abdn.ac.uk/tools/ibmpc/giftrans/index.hti Broken Link