CVE-2016-3177 Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors.
CriticalCVSS 9.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/giflib(Debian:12) | < 5.1.4-0.1 | 5.1.4-0.1 |
| debian/giflib(Debian:13) | < 5.1.4-0.1 | 5.1.4-0.1 |
| debian/giflib(Debian:14) | < 5.1.4-0.1 | 5.1.4-0.1 |
| giflib project giflib | = 5.1.2 | No fix listed |
References
- Debian Security Tracker CVE-2016-3177 vendor-advisory
- [oss-security] 20160316 Re: CVE Request : Use-after-free in gifcolor mailing-list third-party-advisory
- sourceforge.net issue-tracking patch