CVE-2006-4484 in PHP
Summary
Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
08/31/2006
Disclosure
08/31/2006
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 32045 | PHP GD Extension gd_gif_in.c lwzreadbyte_ memory corruption | 119 | Proof-of-Concept | Official fix | CVE-2006-4484 |