CVE-2014-2497 in PHP
Summary
The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
03/14/2014
Disclosure
03/21/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 66746 | PHP gdxpm.c gdImageCreateFromXpm resource management | 399 | Not defined | Not defined | CVE-2014-2497 |