PT-2022-12476

CVE-2021-45972

·

Published

2022-01-01

·

Updated

2023-08-08

Description by

CVSS 3.1
7.1
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions giftrans version 1.12.2
Description The issue arises from a stack-based buffer overflow in the giftrans function. This occurs because a value within the input file dictates the amount of data to be written, allowing an attacker to overwrite up to 250 bytes outside the allocated buffer with arbitrary data.
Recommendations For giftrans version 1.12.2, as a temporary workaround, consider restricting the use of the giftrans function until a patch is available. Avoid using input files that could trigger the buffer overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾