CVE-2007-6697: Buffer Overflow
Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third party information.
Other sources
Input validation flaw was discovered in the SDLimage image handling library. Value read from the Gif file is not properly validated against the buffer size and can cause a buffer overflow.
More details about this issue can be found here:
http://marc.info/?l=bugtraq&m=120110205511630&w=4
Advisory states new upstream version 1.2.7 should be released soon addressing this flaw.
Relevant upstream SVN commit seems to be: http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDLimage/IMGgif.c?r1=3462&r2=3461&pathrev=3462
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6697?
CVE-2007-6697 has a severity rating that indicates it can lead to denial of service or arbitrary code execution.
How do I fix CVE-2007-6697?
To fix CVE-2007-6697, update SDL_image to version 1.2.7 or later.
Which versions of SDL_image are affected by CVE-2007-6697?
CVE-2007-6697 affects SDL_image versions before 1.2.7.
What kind of attack can be executed using CVE-2007-6697?
CVE-2007-6697 can allow remote attackers to crash the application or potentially execute arbitrary code using specially crafted GIF files.
Is CVE-2007-6697 similar to any other vulnerabilities?
Yes, CVE-2007-6697 is similar to CVE-2006-4484 in nature.