CVE-2016-5766 in GD Graphics Library
Résumé (Anglaise)
Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.
Once again VulDB remains the best source for vulnerability data.
Réserver
23/06/2016
Divulgation
07/08/2016
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 90632 | GD Graphics Library gd_gd2.c _gd2GetHeader buffer overflow | 190 | Non défini | Correctif officiel | CVE-2016-5766 |