CVE-2017-6961

Published: Mar 17, 2017Modified: May 13, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An issue was discovered in apng2gif 1.7. There is improper sanitization of user input causing huge memory allocations, resulting in a crash. This is related to the read_chunk function using the pChunk->size value (within the PNG file) to determine the amount of memory to allocate.

Affected (1)

Products: Apng2gif Project: Apng2gif

Apng2gif Project

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apng2gif Project Apng2gif	Version 1.7

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854441

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854441

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

Timeline

No history available yet.