Lucene search
K

1193 matches found

RedHat Linux
RedHat Linux
added 2016/11/15 11:40 a.m.2 views

gd: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow

An integer overflow flaw, leading to a heap-based buffer overflow was found in the gdImagePaletteToTrueColor function of PHP's gd extension. A remote attacker could use this flaw to crash a PHP application or execute arbitrary code with the privileges of the user running that PHP application usin...

8.8CVSS7.8AI score0.04623EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2016/11/02 2:17 p.m.28 views

CVE-2016-8670

Integer signedness error in the dynamicGetbuf function in gdiodp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via...

9.8CVSS6.6AI score0.01746EPSS
Exploits0References1
CNVD
CNVD
added 2016/11/02 12:0 a.m.20 views

Cairo 'cairo-png.c' Integer Overflow Vulnerability

Cairo is a cross-platform open source vector graphics library , it supports in multiple contexts to do 2D drawing , and provides high-quality display and printout . An integer overflow vulnerability exists in Cairo 'cairo-png.c'. An attacker may exploit this issue to crash the affected applicatio...

5.5CVSS7.1AI score0.00235EPSS
Exploits0References1
OSV
OSV
added 2016/10/14 12:0 a.m.0 views

UBUNTU-CVE-2016-8670

Integer signedness error in the dynamicGetbuf function in gdiodp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via...

9.8CVSS7.5AI score0.01746EPSS
Exploits0References4
OSV
OSV
added 2016/10/14 12:0 a.m.2 views

UBUNTU-CVE-2016-6911

The dynamicGetbuf function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF image...

5.5CVSS7AI score0.00641EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2016/10/14 12:0 a.m.36 views

CVE-2016-8670

Integer signedness error in the dynamicGetbuf function in gdiodp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via...

9.8CVSS7.4AI score0.01746EPSS
Exploits0References3
Mageia
Mageia
added 2016/10/12 1:46 p.m.34 views

The updated packages fix a security vulnerability

Integer overflow in the gdImageWebpCtx function in gdwebp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted imagewebp and...

9.8CVSS6.4AI score0.03421EPSS
Exploits0References2
Fedora
Fedora
added 2016/10/05 8:53 a.m.33 views

[SECURITY] Fedora 23 Update: gd-2.1.1-10.fc23

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...

6.5CVSS2.8AI score0.08719EPSS
Exploits0
OSV
OSV
added 2016/10/03 9:59 p.m.2 views

DEBIAN-CVE-2016-6905

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...

6.5CVSS6.7AI score0.01408EPSS
Exploits0References1
OSV
OSV
added 2016/10/03 9:59 p.m.6 views

CVE-2016-6905

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...

6.5CVSS7.2AI score
Exploits0References9
NVD
NVD
added 2016/10/03 9:59 p.m.15 views

CVE-2016-6905

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...

6.5CVSS6.3AI score0.01408EPSS
Exploits0References9
OSV
OSV
added 2016/10/03 9:59 p.m.0 views

UBUNTU-CVE-2016-6905

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...

6.5CVSS5.8AI score0.01408EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2016/10/03 9:59 p.m.38 views

CVE-2016-6905

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...

6.5CVSS6.8AI score0.01408EPSS
Exploits0References3
Cvelist
Cvelist
added 2016/10/03 9:0 p.m.24 views

CVE-2016-6905

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...

6.3AI score0.01408EPSS
Exploits0References9
Debian CVE
Debian CVE
added 2016/10/03 9:0 p.m.27 views

CVE-2016-6905

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...

6.5CVSS6.4AI score0.01408EPSS
Exploits0
CVE
CVE
added 2016/10/03 9:0 p.m.60 views

CVE-2016-6905

The CVE-2016-6905 issue affects the GD Graphics Library (libgd) read_image_tga in gd_tga.c, with vulnerable code paths present in libgd prior to 2.2.3. The root cause is an out-of-bounds read triggered by processing a crafted TGA image, enabling remote attackers to cause a denial of service. The ...

6.5CVSS6.2AI score0.01408EPSS
Exploits0References9Affected Software1
CNVD
CNVD
added 2016/09/29 12:0 a.m.2 views

PHP GD Graphics Library Integer Overflow Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntax , support for multiple databases and operating systems and support for C, C++ for program extensions , etc...

9.8CVSS7AI score0.03421EPSS
Exploits0References1
NVD
NVD
added 2016/09/28 8:59 p.m.20 views

CVE-2016-7568

Integer overflow in the gdImageWebpCtx function in gdwebp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted imagewebp and...

9.8CVSS10AI score0.03421EPSS
Exploits0References7
OSV
OSV
added 2016/09/28 8:59 p.m.2 views

DEBIAN-CVE-2016-7568

Integer overflow in the gdImageWebpCtx function in gdwebp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted imagewebp and...

9.8CVSS8.1AI score0.03421EPSS
Exploits0References1
OSV
OSV
added 2016/09/28 8:59 p.m.3 views

CVE-2016-7568

Integer overflow in the gdImageWebpCtx function in gdwebp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted imagewebp and...

9.8CVSS10AI score
Exploits0References7
Rows per page
Query Builder