CVE-2016-6911

The dynamicGetbuf function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF image...

CVE-2016-6911

CVE-2016-6911 : The GD Graphics Library (libgd) has a vulnerability in dynamicGetbuf (pre-2.2.4) that allows an out-of-bounds read when processing crafted TIFF images, leading to potential denial of service. Affected component: libgd’s dynamicGetbuf; impact: DoS via crafted TIFF. The entry is cor...

CVE-2016-9317

The gdImageCreate function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service system hang via an oversized image...

CVE-2016-6912: Double Free

Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via large width and height values...

CVE-2016-9317

The gdImageCreate function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service system hang via an oversized image...

CVE-2016-9317: Improper Input Validation

The gdImageCreate function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service system hang via an oversized image...

CVE-2016-6911: Out-of-bounds Read

The dynamicGetbuf function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF image...

PHP 7.1.x < 7.1.1 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.1. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exists that is triggered when handling unserialized object properties. An unauthenticated, remote attacker c...

PHP 7.0.x < 7.0.15 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.15. It is, therefore, affected by the following vulnerabilities : - A remote code execution vulnerability exists due to a use-after-free error in the unserialize function that is triggered when usin...

libgd 2.1.1 - Signedness Heap Overflow

Vulnerability details Represents the block index size of 4 bytes is stored in a signed integer. chunkIdxi. size by gdGetIntto resolve the GD2 head during libgd-2.1.1/src/gdgd2. c: ,---- | 53 typedef struct | 54 int offset; | 55 int size; | 56 | 57 tchunkinfo; ---- libgd-2.1.1/src/gdgd2. c: ,---- ...

PHP LibGD Heap Buffer Overflow

!/usr/bin/env python2 PoC for CVE-2016-3074 targeting Ubuntu 15.10 x86-64 with php5-gd and php5-fpm running behind nginx. ,---- | $ python exploit.py --bind-port 5555 http://1.2.3.4/upload.php | this may take a while | offset 912 of 10000... | + connected to 1.2.3.4:5555 | id | uid=33www-data...

PHP LibGD Heap Buffer Overflow Exploit

Proof of concept exploit for CVE-2016-3074 targeting Ubuntu 15.10 x86-64 with php5-gd and php5-fpm running behind nginx. !/usr/bin/env python2 PoC for CVE-2016-3074 targeting Ubuntu 15.10 x86-64 with php5-gd and php5-fpm running behind nginx. ,---- | $ python exploit.py --bind-port 5555...

CVE-2016-9933

Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library aka libgd before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service segmentation violation via a crafted imagefilltoborder call that...

CVE-2016-8670

CVE-2016-8670 is a signedness/stack-based buffer overflow in the GD Graphics Library (libgd) dynamicGetbuf. It affects libgd as used by PHP up to 5.6.28 and PHP 7.x up to 7.0.12/7.0.13, enabling denial of service and potentially arbitrary code execution via crafted image data (imagecreatefromstri...

CVE-2016-9933

CVE-2016-9933 is a stack consumption denial-of-service vulnerability in the GD Graphics Library (libgd) within gdImageFillToBorder (gd.c) that affects PHP builds using libgd prior to 2.2.2. Exploitation occurs via crafted imagefilltoborder calls that trigger a negative color value. Public referen...

CVE-2016-8670

Integer signedness error in the dynamicGetbuf function in gdiodp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via...

CVE-2016-8670: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer signedness error in the dynamicGetbuf function in gdiodp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via...

CVE-2016-10167

The gdImageCreateFromGd2Ctx function in gdgd2.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service application crash via a crafted image file...

PT-2016-7161

Name of the Vulnerable Software and Affected Versions GD Graphics Library aka libgd versions prior to 2.2.4 Description The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file, related to the decompression buffer in the read image tga function...

CVE-2016-6906

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file, related to the decompression buffer...