GD vulnerability

2017-08-14T00:00:00
ID USN-3389-2
Type ubuntu
Reporter Ubuntu
Modified 2017-08-14T00:00:00

Description

USN-3389-1 fixed a vulnerability in GD Graphics Library.
This update provides the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

A vulnerability was discovered in GD Graphics Library (aka libgd),
as used in PHP that does not zero colorMap arrays before use.
A specially crafted GIF image could use the uninitialized tables to
read bytes from the top of the stack.