CVE-2014-2497 in PHP

Resumen (Inglés)

The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.

Reservar

2014-03-14

Divulgación

2014-03-21

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
66746	PHP gdxpm.c gdImageCreateFromXpm denegación de servicio	399	No está definido	No está definido	CVE-2014-2497