CVE:CVE-2017-1000421
CNNVD:CNNVD-201801-070
Gifsicle gifview是一款开源的用于创建、编辑和优化GIF图像的工具。
Gifsicle gifview 1.89及之前的版本中的‘read_gif’函数存在释放后重用漏洞。攻击者可利用该漏洞可能执行代码。
solution:Upgrade gifsicle_project gifsicle to a higher version than 1.89,and avoid the version (,1.89]; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0