CVE-2010-4694: Catb GIF2PNG

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output files, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.

Affected products

• Catb GIF2PNG: up to and including 2.5.3; version 0.99 only; version 1.0.0 only; version 1.1.0 only; version 1.1.1 only; version 1.2.0 only; …

Published 2011-01-14. Last modified 2026-06-16.