Homepage

Out-of-Bounds The advisory has been revoked - it doesn't affect any version of package sdl-image1.2  (opens in a new tab)

Threat Intelligence

EPSS
12.67% (96th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU1404-SDLIMAGE12-673987
  • published10 Sept 2020
  • disclosed1 Feb 2008
Report a new vulnerability Found a mistake?

Introduced: 1 Feb 2008

CVE-2007-6697  (opens in a new tab)
CWE-119  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:14.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream sdl-image1.2 package and not the sdl-image1.2 package as distributed by Ubuntu.

Buffer overflow in the LWZReadByte function in IMG_gif.c in SDL_image before 1.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third party information.

References