|
PHP GD Extension WBMP File Integer Overflow Vulnerabilities
PHP's GD extension is prone to two integer-overflow vulnerabilities because it fails to ensure that integer values aren't overrun. Successfully exploiting these issues allows attackers to crash the affected application, potentially denying service to legitimate users. Due to the nature of the issues, code execution may also be possible, but this has not been confirmed. PHP 5.2.1 and prior versions are vulnerable. |
|
|
Privacy Statement |
