CVE-2010-4695

Name of the Vulnerable Software and Affected Versions gif2png versions 2.5.1 through 2.5.2

Description The issue allows remote attackers to create PNG files in unintended directories via a crafted command-line argument. This can be demonstrated by a CGI program that launches gif2png.

Recommendations For gif2png versions 2.5.1 and 2.5.2, consider restricting access to the command-line interface until a patch is available. As a temporary workaround, avoid using gif2png with untrusted input.