CVE-2016-8670 in macOSinfo

Zusammenfassung (Englisch)

Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted imagecreatefromstring call.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservieren

15.10.2016

Veröffentlichung

04.01.2017

Status

Bestätigt

Einträge

VulDB provides additional information and datapoints for this CVE:

IDSchwachstelleCWEAusMasCVE
95943Apple macOS apache_mod_php Pufferüberlauf119Nicht definiertOffizieller FixCVE-2016-8670
95034GD Graphics Library gd_io_dp.c dynamicGetbuf Pufferüberlauf119Nicht definiertOffizieller FixCVE-2016-8670

Beschreibung

CPE

CWE

CVSS

Exploits

History

Diff

Verknüpfen

Threat Intelligence

API JSON

API XML

API CSV

Quellen

◂ ZurückÜbersichtWeiter ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!