PHP "gdImageCreateFromXpm()"空指针间接引用漏洞

🗓️ 19 Mar 2014 00:00:00Reported by RootType

seebug

seebug🔗 www.seebug.org👁 51 Views

PHP "gdImageCreateFromXpm()"空指针间接引用漏洞 CVE ID: CVE-2014-249

Reporter	Title	Published	Views	Family All 159
IBM Security Bulletins	Security Bulletin: Vulnerabilities in php5 affect IBM Flex System Manager (FSM): (CVE-2013-4248 CVE-2013-6420 CVE-2014-2497 CVE-2014-4049)	31 Jan 201901:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities affect IBM's Advanced Management Module (AMM)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PHP affect IBM Chassis Management Module (CMM) (CVE-2013-4248, CVE-2013-6420, CVE-2014-2497, CVE-2014-4049)	31 Jan 201901:55	–	ibm
IBM Security Bulletins	Security Bulletin: Network Intrusion Prevention System is affected by curl and php5 vulnerabilities (CVE-2013-2174, CVE-2014-0015, CVE-2014-0138, CVE-2014-0139, CVE-2013-4248, CVE-2013-6420, CVE-2014-2497, CVE-2014-4049)	23 Feb 202217:14	–	ibm
Tenable Nessus	Mac OS X 10.10.x < 10.10.3 Multiple Vulnerabilities	10 Apr 201900:00	–	nessus
Tenable Nessus	PHP 5.4.x < 5.4.32 / 5.5.x < 5.5.16 Multiple Vulnerabilities	28 Aug 201400:00	–	nessus
Tenable Nessus	Amazon Linux AMI : php55 (ALAS-2014-415)	12 Oct 201400:00	–	nessus
Tenable Nessus	CentOS 5 / 6 : php / php53 (CESA-2014:1326)	1 Oct 201400:00	–	nessus
Tenable Nessus	CentOS 7 : php (CESA-2014:1327)	1 Oct 201400:00	–	nessus
Tenable Nessus	Debian DLA-189-1 : libgd2 security update	9 Apr 201500:00	–	nessus

19 Mar 2014 00:00Current

7.9High risk

Vulners AI Score7.9

EPSS0.05174

php gdimagecreatefromxpm cve-2014-2497 html 漏洞版本 xpm 厂商补丁升级网址 exploit