CVE-2008-0985

Heap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3-rc37a and earlier allows remote attackers to execute arbitrary code via a crafted GIF file whose logical screen height and width are different than the actual height and width.

Affected products

Android Q Sdk, Webkit

Google Android Sdk

= m3-rc37a

Fix

Available

CVSS 2.0

6.8 MEDIUM

EPSS

4.6% (91th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2008-03-06