Ubuntu 14.04 LTS / 16.04 LTS : GD vulnerability (USN-3389-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3389-1 advisory. A vulnerability was discovered in GD Graphics Library aka libgd, as used in PHP that does not zero colorMap arrays before use. A specially crafted GIF...

Amazon Linux AMI : php56 (ALAS-2017-787)

A vulnerability was found in gd. Integer underflow in a calculation in dynamicGetbuf was incorrectly handled, leading in some circumstances to an out of bounds write through a very large argument to memcpy. An attacker could create a crafted image that would lead to a crash or, potentially, code...

SUSE-SU-2016:3251-1 Security update for gd

This update for gd fixes the following issues: CVE-2016-9933 possible stackoverflow on malicious truecolor images bsc1015187...

PHP 4.4.55.2.1 - shmop Local Code Execution

PHP 4.4.55.2.1 - shmop Local Code Execution ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the...

[Full-disclosure] [ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:114 http://www.mandriva.com/security/ Package : libwmf Date : June 27, 2006 Affected: 10.2, 2006.0, Corporate 3.0 Problem Description: Integer overflows were reported in the GD Graphics Library libgd 2.0.28,...