NVD

Id
52132  
Name
CVE-2009-5018  
Description
Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via a long command-line argument, as demonstrated by a CGI program that launches gif2png.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-01-14  
Modified Date
2011-01-26  
Seq
2009-5018  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
263195 52132 CVE-2009-5018 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550978  View
263196 52132 CVE-2009-5018 http://bugs.gentoo.org/show_bug.cgi?id=346501  View
263197 52132 CVE-2009-5018 http://cvs.fedoraproject.org/viewvc/rpms/gif2png/devel/gif2png-overflow.patch?root=extras&view=log  View
263198 52132 CVE-2009-5018 FEDORA-2010-0358  View
263199 52132 CVE-2009-5018 20091213 [gif2png] long filename Buffer Overrun  View
263200 52132 CVE-2009-5018 [oss-security] 20101121 CVE Request: gif2png: command-line buffer overflow problem  View
263201 52132 CVE-2009-5018 [oss-security] 20101121 Re: CVE Request: gif2png: command-line buffer overflow problem  View
263202 52132 CVE-2009-5018 [oss-security] 20101122 Re: CVE Request: gif2png: command-line buffer overflow problem  View
263203 52132 CVE-2009-5018 [oss-security] 20101121 Re: CVE Request: gif2png: command-line buffer overflow problem  View
263204 52132 CVE-2009-5018 GLSA-201101-01  View
263205 52132 CVE-2009-5018 MDVSA-2011:009  View
263206 52132 CVE-2009-5018 41801  View
263207 52132 CVE-2009-5018 ADV-2010-3036  View
263208 52132 CVE-2009-5018 ADV-2011-0023  View
263209 52132 CVE-2009-5018 ADV-2011-0107  View
263210 52132 CVE-2009-5018 gif2png-commandline-bo(64820)  View
263211 52132 CVE-2009-5018 https://bugzilla.redhat.com/show_bug.cgi?id=547515  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33559 JVNDB-2011-003801 gif2png における任意のコマンドを実行される脆弱性 gif2png の gif2png.c には、任意のコマンドを実行される脆弱性が存在します。 CVE-2009-5018 42449 CVE-2009-5018 52132 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003801.html 2011-01-14 2012-03-27 View