Vulnerability Details CVE-2021-45972
The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. This allows an attacker to overwrite up to 250 bytes outside of the allocated buffer with arbitrary data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.3%
CVSS Severity
CVSS v3 Score 7.1
CVSS v2 Score 5.8
References
- http://web.archive.org/web/20150801185019/
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002739
- https://www.abdn.ac.uk/tools/ibmpc/giftrans/index.hti
- http://web.archive.org/web/20150801185019/
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002739
- https://www.abdn.ac.uk/tools/ibmpc/giftrans/index.hti
Products affected by CVE-2021-45972
-
cpe:2.3:a:giftrans_project:giftrans:1.12.2
-
cpe:2.3:o:debian:debian_linux:10.0
-
cpe:2.3:o:debian:debian_linux:11.0
-
cpe:2.3:o:debian:debian_linux:9.0