Lucene search

K
redhatcveRedhat.comRH:CVE-2016-5767
HistoryJun 29, 2016 - 7:48 a.m.

CVE-2016-5767

2016-06-2907:48:31
redhat.com
access.redhat.com
13

0.04 Low

EPSS

Percentile

92.1%

An integer overflow flaw, leading to a heap-based buffer overflow was found in the gdImagePaletteToTrueColor() function of PHP’s gd extension. A remote attacker could use this flaw to crash a PHP application or execute arbitrary code with the privileges of the user running that PHP application using gd via a specially crafted image buffer.