CVE-2010-4694
Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers...
Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output files, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.
Exploit likelihood
What each source reports
NVD Score used
6.8
Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output files, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.
- Record
CVE-2010-4694- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output files, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.
- Record
CVE-2010-4694- Updated
- 2026-11-02
EUVDEUVD-2010-4659 No score
Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output files, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.
- Record
EUVD-2010-4659- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q5cv-2mrg-wvw2 No score
Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers...
Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output files, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.
- Record
GHSA-q5cv-2mrg-wvw2- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2010-4694 No score
Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output files, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.
- Record
UBUNTU-CVE-2010-4694- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4694 is a medium vulnerability (CVSS 6.8) in Catb Gif2png, published January 14, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.01%, the 80th percentile. No source names a fixed version.
References
security.gentoo.org/glsa/glsa-201203-15.xml
bugzilla.redhat.com/show_bug.cgi?id=547515
openwall.com/lists/oss-security/2010/11/22/12
vupen.com/english/advisories/2011/0023
mandriva.com/security/advisories?name=MDVSA-2011:009
openwall.com/lists/oss-security/2010/11/22/3
Show 17 moreShow less
secunia.com/advisories/42796
bugs.gentoo.org/show_bug.cgi?id=346501
cvs.fedoraproject.org/viewvc/rpms/gif2png/devel/gif2png-overflow.patch?root=extras&view=log
exchange.xforce.ibmcloud.com/vulnerabilities/64754
vupen.com/english/advisories/2010/3036
cvs.fedoraproject.org/viewvc/rpms/gif2png/devel/gif2png-overflow.patch?revision=HEAD&root=extras&view=markup
openwall.com/lists/oss-security/2010/11/21/1
vupen.com/english/advisories/2011/0107
security.gentoo.org/glsa/glsa-201101-01.xml
securityfocus.com/bid/45815
openwall.com/lists/oss-security/2010/11/22/1
bugs.debian.org/cgi-bin/bugreport.cgi?bug=550978
lists.fedoraproject.org/pipermail/package-announce/2010-November/051229.html
nvd.nist.gov/vuln/detail/CVE-2010-4694
github.com/advisories/GHSA-q5cv-2mrg-wvw2
ubuntu.com/security/CVE-2010-4694
cve.org/CVERecord?id=CVE-2010-4694