CVE-2006-4484

2006-08-3121:04:00

Debian Security Bug Tracker

security-tracker.debian.org

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.317 Low

EPSS

Percentile

96.9%

JSON

Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array.

OSVersionArchitecturePackageVersionFilename
Debian12alllibgd2< 2.0.33-5.1libgd2_2.0.33-5.1_all.deb
Debian11alllibgd2< 2.0.33-5.1libgd2_2.0.33-5.1_all.deb
Debian10alllibgd2< 2.0.33-5.1libgd2_2.0.33-5.1_all.deb
Debian999alllibgd2< 2.0.33-5.1libgd2_2.0.33-5.1_all.deb
Debian13alllibgd2< 2.0.33-5.1libgd2_2.0.33-5.1_all.deb
Debian12allxloadimage<= 4.1-25xloadimage_4.1-25_all.deb
Debian11allxloadimage<= 4.1-25xloadimage_4.1-25_all.deb
Debian10allxloadimage<= 4.1-25xloadimage_4.1-25_all.deb
Debian999allxloadimage<= 4.1-25xloadimage_4.1-25_all.deb
Debian13allxloadimage<= 4.1-25xloadimage_4.1-25_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libgd2	< 2.0.33-5.1	libgd2_2.0.33-5.1_all.deb
Debian	11	all	libgd2	< 2.0.33-5.1	libgd2_2.0.33-5.1_all.deb
Debian	10	all	libgd2	< 2.0.33-5.1	libgd2_2.0.33-5.1_all.deb
Debian	999	all	libgd2	< 2.0.33-5.1	libgd2_2.0.33-5.1_all.deb
Debian	13	all	libgd2	< 2.0.33-5.1	libgd2_2.0.33-5.1_all.deb
Debian	12	all	xloadimage	<= 4.1-25	xloadimage_4.1-25_all.deb
Debian	11	all	xloadimage	<= 4.1-25	xloadimage_4.1-25_all.deb
Debian	10	all	xloadimage	<= 4.1-25	xloadimage_4.1-25_all.deb
Debian	999	all	xloadimage	<= 4.1-25	xloadimage_4.1-25_all.deb
Debian	13	all	xloadimage	<= 4.1-25	xloadimage_4.1-25_all.deb