[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuAZMOoztyI8xoJ9WjA7GtyFv4j_KKvCZ3znwh9gu56w":3,"g5a-risk:CVE-2018-11489":130},{"success":4,"data":5,"meta":128},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":54,"references":55,"referencesCount":72,"weaknesses":73,"weaknessesCount":54,"isActivelyExploited":87,"cisaInfo":27,"otxData":27,"relatedBlogPosts":88,"seoMetadata":89,"configurations":114,"relatedVendorCves":126,"notableEvents":127},"CVE-2018-11489","What is CVE-2018-11489?","The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain CrntCode array index is not checked. This will lead to a denial of service or possibly unspecified other impact.","The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflo...","2018-05-26T18:29:00.213","2023-11-07T02:51:41.983",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":26,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":4},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":35,"Authentication":23,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.02466,[40,40,40,40,40,40,40],"High",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"giflib_project","giflib","*","cpe:2.3:a:giflib_project:giflib:*:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"sam2p_project","sam2p","0.49.4","cpe:2.3:a:sam2p_project:sam2p:0.49.4:*:*:*:*:*:*:*",2,[56,62,68],{"url":57,"source":58,"tags":59},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F104341","Securityfocus",[60,61],"Third Party Advisory","VDB Entry",{"url":63,"source":64,"tags":65},"https:\u002F\u002Fgithub.com\u002Fpts\u002Fsam2p\u002Fissues\u002F37","GitHub",[66,67,60],"Exploit","Issue Tracking",{"url":69,"source":70,"tags":71},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","Apache",[],3,[74,82],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-129","Improper Validation of Array Index","The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.","","Draft","Variant","Simple",{"id":83,"name":84,"description":85,"extendedDescription":78,"status":79,"abstraction":86,"structure":81},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Base",false,[],{"title":90,"metaDescription":91,"keywords":92,"canonicalUrl":93,"structuredData":94},"What is CVE-2018-11489? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-11489, a high severity cyber security vulnerability from 2018. The DGifDecompressLine function in dgif_lib.c in GIFLIB (po...","CVE-2018-11489, CVE-2018-11489 vulnerability, CVE-2018-11489 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, giflib_project security, sam2p_project security, giflib vulnerability, sam2p vulnerability","\u002Fwhat-is\u002Fcve-2018-11489",{"@context":95,"@type":96,"headline":90,"description":91,"datePublished":10,"dateModified":11,"author":97,"publisher":101,"about":105,"mainEntityOfPage":109,"articleSection":112,"keywords":113},"https:\u002F\u002Fschema.org","TechArticle",{"@type":98,"name":99,"url":100},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":98,"name":99,"url":100,"logo":102},{"@type":103,"url":104},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":106,"name":6,"description":107,"additionalType":108},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":110,"@id":111},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-11489","Cybersecurity","CVE-2018-11489, CVE-2018-11489 vulnerability, CVE-2018-11489 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[115],{"Operator":27,"Negate":27,"Nodes":116},[117],{"Operator":118,"Negate":27,"CPEMatch":119},"OR",[120,124],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":121,"VersionStartExcluding":27,"VersionStartIncluding":122,"VersionEndExcluding":27,"VersionEndIncluding":123},"D1D4CA37-EA89-4FFE-B4CD-F0AB1F163C58","3.0","3.1.1",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":125,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"EE79927B-648D-46F8-ACDF-5E96440FDD02",[],[],{"lastModified":11,"cacheTime":129,"version":33},1792353261853,{"score":131,"band":132,"action":133,"scoredAt":134},53,"Medium","Plan remediation","2026-10-16T06:44:04.484302+00:00"]