← All advisories

Critical severity9.8OSV Advisory· Published Jan 2, 2018· Updated Jun 17, 2026

CVE-2017-1000421

CVE-2017-1000421

Description

Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code execution

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Kohler/GifsicleOSV2 versions
v1.10, v1.10b1, v1.11, …+ 1 more
- (no CPE)range: v1.10, v1.10b1, v1.11, …
- (no CPE)range: <=1.89
Lcdf/Gifsicle
cpe:2.3:a:lcdf:gifsicle:*:*:*:*:*:*:*:*
Range: <=1.89
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

github.com/kohler/gifsicle/issues/114nvdIssue TrackingPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2018/01/msg00006.htmlnvdMailing ListThird Party Advisory
www.debian.org/security/2018/dsa-4084nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.