CVE-2013-7226

Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x
before 5.5.9 allows remote attackers to cause a denial of service
(application crash) or possibly have unspecified other impact via an
imagecrop function call with a large x dimension value, leading to a
heap-based buffer overflow.

Bugs

• <https://bugs.php.net/bug.php?id=66356&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=1065108&gt;

Notes