{"id":"CVE-2017-18120","details":"A double-free bug in the read_gif function in gifread.c in gifsicle 1.90 allows a remote attacker to cause a denial-of-service attack or unspecified other impact via a maliciously crafted file, because last_name is mishandled, a different vulnerability than CVE-2017-1000421.","modified":"2026-07-08T15:10:56.987830Z","published":"2018-02-02T09:29:00.227Z","references":[{"type":"ADVISORY","url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878739"},{"type":"ADVISORY","url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881120"},{"type":"ADVISORY","url":"https://github.com/kohler/gifsicle/issues/117"},{"type":"FIX","url":"https://github.com/kohler/gifsicle/commit/118a46090c50829dc543179019e6140e1235f909"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kohler/gifsicle","events":[{"introduced":"fad477c307298ac140a2c26b01c72925f300a7a7"},{"last_affected":"fad477c307298ac140a2c26b01c72925f300a7a7"},{"fixed":"118a46090c50829dc543179019e6140e1235f909"}],"database_specific":{"cpe":"cpe:2.3:a:lcdf:gifsicle:1.90:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.90"},{"last_affected":"1.90"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["1.90","v1.90"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-18120.json","vanir_signatures_modified":"2026-07-08T15:10:56Z","vanir_signatures":[{"target":{"file":"src/gifread.c"},"deprecated":false,"digest":{"line_hashes":["40938569967824248452519032506648219435","140282648014875945732110581723291858112","312581299782086433331941700568154316169","175509438779924551367698524329515749884"],"threshold":0.9},"id":"CVE-2017-18120-5bf08d7f","signature_type":"Line","signature_version":"v1","source":"https://github.com/kohler/gifsicle/commit/118a46090c50829dc543179019e6140e1235f909"},{"signature_version":"v1","source":"https://github.com/kohler/gifsicle/commit/118a46090c50829dc543179019e6140e1235f909","target":{"file":"src/gifread.c","function":"read_gif"},"deprecated":false,"digest":{"function_hash":"198277961152993239630182827096374800280","length":2625},"id":"CVE-2017-18120-ac119a30","signature_type":"Function"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}