1976 matches found
GD Graphics Library <= 2.0.34 (libgd) gdImageCreateXbm Function Unspecified DoS
No description provided by source. source: http://www.securityfocus.com/bid/24651/info The GD graphics library is prone to multiple vulnerabilities. An attacker can exploit this issue to cause denial-of-service conditions or execute arbitrary code in the context of applications implementing the...
WordPress GD Star Rating plugin <= 1.9.10 SQL Injection
No description provided by source. Exploit Title: WordPress GD Star Rating plugin = 1.9.10 SQL Injection Vulnerability Date: 2011-09-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/gd-star-rating.zip Version: 1.9.10 tested Not...
TCW PHP Album Multiple Vulnerabilities
No description provided by source. 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: TCW PHP Album Multiple Vulnerability Vendor...
PHP <= 5.2.1 GD Extension WBMP File Integer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/23357/info PHP's GD extension is prone to two integer-overflow vulnerabilities because it fails to ensure that integer values aren't overrun. Successfully exploiting these issues allows attackers to crash the affected...
GD Graphics Library 2.0.33 Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18294/info The GD Graphics Library is prone to a denial-of-service vulnerability. Attackers can trigger an infinite-loop condition when the library tries to handle malformed image files. This issue allows attackers to...
PHP <= 5.2.8 gd library - imageRotate() Information Leak Vulnerability
No description provided by source. PHP - gd library - imageRotatefunction Information Leak Vulnerability Discovered by: Hamid Ebadi, Further research and exploit: Mohammad R. Roohian CSIRT Team Members Amirkabir University APA Laboratory Introduction PHP is a popular web programming language whic...
Fedora 19 : php-phpunit-PHPUnit-MockObject-1.2.3-4.fc19 / php-5.5.13-3.fc19 / etc (2014-6904)
29 May 2014, PHP 5.5.13 CLI server : - Fixed bug 67079 Missing MIME types for XML/XSL files. Anatol COM : - Fixed bug 66431 Special Character via COM Interface CPUTF8. Anatol Core : - Fixed bug 65701 copy doesn't work when destination filename is created by tempnam. Boro Sitnikovski - Fixed bug...
Fedora 20 : php-phpunit-PHPUnit-MockObject-1.2.3-4.fc20 / php-5.5.13-3.fc20 / etc (2014-6901)
29 May 2014, PHP 5.5.13 CLI server : - Fixed bug 67079 Missing MIME types for XML/XSL files. Anatol COM : - Fixed bug 66431 Special Character via COM Interface CPUTF8. Anatol Core : - Fixed bug 65701 copy doesn't work when destination filename is created by tempnam. Boro Sitnikovski - Fixed bug...
Fedora 19 : php-5.5.11-1.fc19 (2014-4735)
03 Apr 2014, PHP 5.5.11 Core : - Allow zero length comparison in substrcompare Tjerk - Fixed bug 60602 procopen changes environment array Tjerk SPL : - Added feature 65545 SplFileObject::fread Tjerk cURL : - Fixed bug 66109 Can't reset CURLOPTCUSTOMREQUEST to default behaviour Tjerk - Fix...
WordPress GD Star Rating Plugin <= 19.22 - Multiple CSRF
Because of these vulnerabilities, the attackers can hijack the authentication of administrators for requests that conduct SQL injection attacks or cross-site scripting XSS attacks. Solution Update the plugin...
WordPress GD Star Rating Plugin <= 19.22 - SQL Injection
Because of this vulnerability,administrators to execute arbitrary SQL commands via the "s" parameter in the gd-star-rating-stats page to wp-admin/admin.php. Solution Update the plugin...
WordPress GD Star Rating插件跨站请求伪造漏洞
WordPress是一款内容管理系统。 由于应用程序允许用户通过未经验证的HTTP请求执行某些操作，攻击者可以利用漏洞当一个登录的管理用户访问特制的网页时更改插件的配置。 0 WordPress GD Star Rating Plugin 1.x 目前没有详细解决方案： http://wordpress.org/...
GD Star Rating 1.9.22 XSS / CSRF / SQL Injection
Details ================ Software: GD Star Rating Version: 1.9.22 Homepage: http://wordpress.org/plugins/gd-star-rating/ CVSS: 8.5 High; AV:N/AC:L/Au:S/C:C/I:N/A:C Description ================ XSS, CSRF and blind SQL injection in GD Star Rating 1.9.22 Vulnerability ================ This plugin is...
CVE-2014-2497
The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted color table in an XPM file...
UBUNTU-CVE-2014-2497
The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted color table in an XPM file...
php-gd 'gdxpm.c'空指针拒绝服务漏洞
Bugtraq ID:66233 CVE ID:CVE-2014-2497 php-gd是一个图片处理扩展库。 php-gd 'gdxpm.c'中的gdImageCreateFromXpm函数存在安全漏洞，调用strlen解析image.colorTablei.ccolor时存在空指针引用错误，允许攻击者利用漏洞使链接此库的应用崩溃。 0 php-gd = v5.4.17-2 目前没有详细解决方案提供： http://www.php.net/ php imagecreatefromxpm"monochome-poc.xpm"; gdb p colorTable0 $2 = string ...
PHP 'ext/gd/gd.c'信息泄漏漏洞
CVE ID:CVE-2014-2020 PHP是一种HTML内嵌式的语言。 PHP 'ext/gd/gd.c'没有检查数据类型，允许远程攻击者使用字符串或数组数据累心过来代替数字数据类型来获取敏感信息，此漏洞不同于CVE-2013-7226。 0 PHP 5.5.x PHP 5.5.9已经修复该漏洞，建议用户下载更新： http://php.net...
PHP 5.5.x < 5.5.9 GD Extension Multiple Vulnerabilities
Binary data 8125.prm...
PHP 5.5.x < 5.5.9 GD Extension Multiple Vulnerabilities
According to its banner, the version of PHP 5.5.x installed on the remote host is a version prior to 5.5.9. It is, therefore, potentially affected by the following vulnerabilities related to the GD extension : - A heap-based buffer overflow error exists related to the functions 'gdImageCrop' and...
Internet Bug Bounty: PHP Heap Overflow Vulnerability in imagecrop()
Overview: --------- PHP 5.5.0 added a function called imagecrop in PHP's gd extension. This function is implemented using the gdImageCrop function, which creates a new gd image and crops the result by directly copying pixel data. However, this function contains multiple arithmetic operations pron...