CVE-2016-5767
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 6.7%
Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.
Productos afectados
n/a · n/aReferencias
http://github.com/php/php-src/commit/c395c6e5d7e8df37a21265ff76e48fe75ceb5ae6?w=1http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.htmlhttp://lists.opensuse.org/opensuse-updates/2016-08/msg00003.htmlhttp://php.net/ChangeLog-5.phphttp://php.net/ChangeLog-7.phphttp://rhn.redhat.com/errata/RHSA-2016-2598.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2750.htmlhttps://bugs.php.net/bug.php?id=72446https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731http://www.openwall.com/lists/oss-security/2016/06/23/4http://www.securityfocus.com/bid/91395