Secunia

Two vulnerabilities have been reported in libungif, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially to compromise a user's system.

1) A NULL pointer dereferencing error can be exploited to crash an application that uses libungif via a specially crafted ".gif" file.

2) A boundary error can be exploited to cause out-of-bounds memory access, potentially allowing arbitrary code execution in an application that uses libungif via a specially crafted ".gif" file.

The vulnerabilities exist in "gifalloc.c", "dgif_lib.c" and "egif_lib.c".

The vulnerabilities have been reported in version 4.1.3. Prior versions may also be affected.

Note: All applications that use libungif are potentially affected by these vulnerabilities.

Solution
Update to version 4.1.4.
Further details available in Customer Area

Provided and/or discovered by
Independently discovered by:
* Chris Evans
* Daniel Eisenbud

Changelog
Further details available in Customer Area

Original Advisory
Red Hat Bugzilla:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=171413

Chris Evans:
http://scary.beasts.org/security/CESA-2005-007.txt

Deep Links
Links available in Customer Area