gd: Integer overflow in _gd2GetHeader() resulting in heap overflow
An integer overflow flaw, leading to a heap-based buffer overflow was found in the imagecreatefromgd2 function of PHP's gd extension. A remote attacker could use this flaw to crash a PHP application or execute arbitrary code with the privileges of the user running that PHP application using gd vi...