644 matches found
MGASA-2016-0421 Updated libgd packages fixe security vulnerabilities
Ibrahim El-Sayed discovered that the GD library incorrectly handled certain malformed Tiff images. If a user or automated system were tricked into processing a specially crafted Tiff image, an attacker could cause a denial of service CVE-2016-6911. Emmanuel Law discovered that the GD library...
Updated libgd packages fixe security vulnerabilities
Ibrahim El-Sayed discovered that the GD library incorrectly handled certain malformed Tiff images. If a user or automated system were tricked into processing a specially crafted Tiff image, an attacker could cause a denial of service CVE-2016-6911. Emmanuel Law discovered that the GD library...
SOL38016814 - PHP and libgd vulnerabilities CVE-2016-5116, CVE-2016-6128, CVE-2016-6132, and CVE-2016-6214
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
F5 Networks BIG-IP : libgd vulnerability (K71581599)
The output function in gdgifout.c in the GD Graphics Library aka libgd allows remote attackers to cause a denial of service out-of-bounds read via a crafted image. CVE-2016-6161 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks...
SOL31542650 - PHP and libGD vulnerability CVE-2016-7568
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
gd: gdImageScaleTwoPass function in gd_interpolation.c uses inconsistent allocate and free approaches
The gdImageScaleTwoPass function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service memory consumption via a crafted call, as demonstrated ...
GD Library LibGD Integer Overflow (CVE-2016-5766)
A code execution vulnerability exists in LibGD. The vulnerability is due to an integer overflow leading to a heap buffer overflow. A remote attacker can exploit this flaw by getting the target application to process a crafted malicious GD2 file. Successful exploitation could result in code...
CVE-2016-6911
The dynamicGetbuf function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF image...
FreeBSD : libgd -- integer overflow which could lead to heap buffer overflow (2a526c78-84ab-11e6-a4a1-60a44ce6887b)
LibGD reports : An integer overflow issue was found in function gdImageWebpCtx of file gdwebp.c which could lead to heap buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...
CVE-2016-6905
The CVE-2016-6905 issue affects the GD Graphics Library (libgd) read_image_tga in gd_tga.c, with vulnerable code paths present in libgd prior to 2.2.3. The root cause is an out-of-bounds read triggered by processing a crafted TGA image, enabling remote attackers to cause a denial of service. The ...
CVE-2016-6905
The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...
libgd 'gd_webp.c' Integer Overflow Vulnerability
libgd also known as GD Graphics Library or libgd2 is an American software developer Thomas Boutell developed an open source library for dynamic image creation, which supports the creation of charts, graphs and thumbnails and so on. An integer overflow vulnerability exists in libgd version 2.2.3,...
Integer overflow
Integer overflow in the gdImageWebpCtx function in gdwebp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted imagewebp and...
CVE-2016-7568
CVE-2016-7568 is a vulnerability in the GD Graphics Library (libgd/libgd2) ≤ 2.2.3, used by PHP up to 7.0.11. The flaw is an integer overflow in the gdImageWebpCtx function (gd_webp.c) that can cause a heap-based buffer overflow, enabling a remote attacker to trigger a denial of service and possi...
CVE-2016-7568
Integer overflow in the gdImageWebpCtx function in gdwebp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted imagewebp and...
CVE-2016-7568: Integer Overflow or Wraparound
Integer overflow in the gdImageWebpCtx function in gdwebp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted imagewebp and...
CVE-2016-7568
Integer overflow in the gdImageWebpCtx function in gdwebp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted imagewebp and...
libgd -- integer overflow which could lead to heap buffer overflow
LibGD reports: An integer overflow issue was found in function gdImageWebpCtx of file gdwebp.c which could lead to heap buffer overflow...
openSUSE Security Update : gd (openSUSE-2016-1003)
This update for gd fixes the following issues : - CVE-2016-6214: Buffer over-read issue when parsing crafted TGA file bsc991436 - CVE-2016-6132: read out-of-bands was found in the parsing of TGA files using libgd bsc987577 - CVE-2016-6128: Invalid color index not properly handled bsc991710 -...
