CVE-2016-1903 in Secure Backup

Summary

The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a large bgd_color argument to the imagerotate function.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

01/14/2016

Disclosure

01/18/2016

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
95552	Oracle Secure Backup PHP gd_interpolation.c imagerotate memory corruption	119	Not defined	Official fix	CVE-2016-1903
80328	PHP gd_interpolation.c imagerotate memory corruption	119	Not defined	Official fix	CVE-2016-1903

Sources

• MITRE
• NVD
• CVE Details