Description
Heap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3-rc37a and earlier allows remote attackers to execute arbitrary code via a crafted GIF file whose logical screen height and width are different than the actual height and width.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://securityreason.com/securityalert/3727 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40998 ↗
- http://www.coresecurity.com/?action=item&id=2148 ↗
- http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html ↗
- http://www.securityfocus.com/bid/28005 ↗
- http://www.securityfocus.com/archive/1/489135/100/0/threaded ↗