Name: CVE-2010-4695: Improper Restriction of Operations within the Bounds of a Memory Buffer
Creator: Rapid7
Published: 2011-01-14T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2010-4695, CWE-119, CVSS 5, EPSS 0.02445

A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png_2.5.2-1 on Debian GNU/Linux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in unintended directories via a crafted command-line argument, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Gentoo Linux	—	Upgrade media-gfx/gif2png.	Oct 30, 2017	Jan 14, 2011

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

Covered by Rapid7

Prioritize with Active Threat Intelligence