CVE-2009-5018: Catb GIF2PNG

Medium severity, CVSS 6.8. EPSS: 10.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via a long command-line argument, as demonstrated by a CGI program that launches gif2png.

Affected products

• Catb GIF2PNG: up to and including 2.5.3; version 0.99 only; version 1.0.0 only; version 1.1.0 only; version 1.1.1 only; version 1.2.0 only; …

Published 2011-01-14. Last modified 2026-06-16.