CVE-2017-7940

MEDIUM

ImageWorsener 1.3.0 - Uncontrolled Resource Consumption via Crafted GIF File

Title source: llm

Description

The iw_read_gif_file function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of available memory via a crafted file.

References (2)

Core 2

Core References

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/201706-06

Issue Tracking, Patch x_refsource_confirm

https://github.com/jsummers/imageworsener/issues/18

Scores

CVSS v3 5.5

EPSS 0.0085

EPSS Percentile 53.5%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-400

Status published

Products (1)

entropymine/imageworsener 1.3.0

Published Apr 18, 2017

Tracked Since Feb 18, 2026