CVE-2017-1000421: Use After Free
Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the readgif function resulting potential code execution
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2017-1000421.
What is the severity of CVE-2017-1000421?
The severity of CVE-2017-1000421 is critical.
Which software versions are affected by CVE-2017-1000421?
Gifsicle gifview versions 1.89 and older are affected by CVE-2017-1000421.
How can I fix CVE-2017-1000421?
To fix CVE-2017-1000421, update gifsicle gifview to versions 1.91-5, 1.92-2, 1.93-2, or 1.94-1.
Are there any references for CVE-2017-1000421?
Yes, you can find references for CVE-2017-1000421 at the following links: [https://github.com/kohler/gifsicle/issues/114](https://github.com/kohler/gifsicle/issues/114), [https://lists.debian.org/debian-lts-announce/2018/01/msg00006.html](https://lists.debian.org/debian-lts-announce/2018/01/msg00006.html), [https://www.debian.org/security/2018/dsa-4084](https://www.debian.org/security/2018/dsa-4084).