CVEs-PoC/2008/CVE-2008-0985.md

CVE-2008-0985

Description

Heap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3-rc37a and earlier allows remote attackers to execute arbitrary code via a crafted GIF file whose logical screen height and width are different than the actual height and width.

POC

Reference

• http://securityreason.com/securityalert/3727
• http://www.coresecurity.com/?action=item&id=2148

Github

• https://github.com/ARPSyndicate/cve-scores
• https://github.com/BushraAloraini/Android-Vulnerabilities