Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-9709
HistoryMar 30, 2015 - 12:00 a.m.

CVE-2014-9709

2015-03-3000:00:00
ubuntu.com
ubuntu.com
10

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.039 Low

EPSS

Percentile

91.9%

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in
PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause
a denial of service (buffer over-read and application crash) via a crafted
GIF image that is improperly handled by the gdImageCreateFromGif function.

Bugs

Notes

Author Note
mdeslaur php5 uses system gd
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlibgd2< 2.0.36~rc1~dfsg-6ubuntu2.1UNKNOWN
ubuntu14.04noarchlibgd2< 2.1.0-3ubuntu0.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.039 Low

EPSS

Percentile

91.9%