vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2010-4695

N/A
Published: January 14, 2011 at 05:00 PM UTC
Updated: June 16, 2026 at 11:25 PM UTC
1 product affected across 1 vendorGIF2PNG· also runs on 2 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 2%

Description

A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png_2.5.2-1 on Debian GNU/Linux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in unintended directories via a crafted command-line argument, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

GIF2PNG· Catb
95%
2.5.12.5.2
debian-linux (environment) · redhat-fedora (environment)

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

References (8)

x_refsource_CONFIRM
Source: [email protected]
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550978
x_refsource_CONFIRMExploitPatch
Source: [email protected]
http://cvs.fedoraproject.org/viewvc/rpms/gif2png/devel/gif2png-overflow.patch?root=extras&r1=1.1&r2=1.2
x_refsource_CONFIRM
Source: [email protected]
http://cvs.fedoraproject.org/viewvc/rpms/gif2png/devel/gif2png-overflow.patch?root=extras&view=log
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051229.html
Vendor Advisoryx_refsource_GENTOO
Source: [email protected]
http://security.gentoo.org/glsa/glsa-201203-15.xml
VDB Entryx_refsource_BID
Source: [email protected]
http://www.securityfocus.com/bid/45920
x_refsource_CONFIRMx_refsource_MISCExploit
Source: [email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=547515
VDB Entryx_refsource_XF
Source: [email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/64819

CVSS

5MEDIUM[email protected]
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-119

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card